CISA Urges Organizations to Patch Actively Exploited Zimbra XSS Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday announced that it has expanded its Known Exploited Vulnerabilities Catalog with a zero-day recently identified in the Zimbra email platform.
read more

Continue reading CISA Urges Organizations to Patch Actively Exploited Zimbra XSS Vulnerability

Stealthy ‘SockDetour’ Backdoor Used in Attacks on U.S. Defense Contractors

A second, custom backdoor was observed being deployed in attacks on four defense contractors if the primary backdoor was removed, security researchers with Palo Alto Networks’ Unit 42 division report.
read more

Continue reading Stealthy ‘SockDetour’ Backdoor Used in Attacks on U.S. Defense Contractors

US, UK Warn of Iranian Cyberattacks on Government, Commercial Networks

Governmental agencies in the United States and the United Kingdom warn of cyberespionage operations that the Iranian state-sponsored threat actor MuddyWater has been running against both public and private sector organizations worldwide.
read more
Continue reading US, UK Warn of Iranian Cyberattacks on Government, Commercial Networks