Collaborate Disseminate
IT management software provider ConnectWise on Friday announced updates that patch a critical vulnerability which, according to cybersecurity professionals, exposes thousands of servers to attacks.
read more Continue reading Critical ConnectWise Vulnerability Affects Thousands of Internet-Exposed Servers
Google on Thursday released an emergency update for Chrome 107 to patch an actively exploited zero-day vulnerability.
read more Continue reading Google Releases Emergency Chrome 107 Update to Patch Actively Exploited Zero-Day
Industrial organizations continue to be a top target for ransomware attacks, and reports published by cybersecurity companies this week reveal some recent trends.
read more Continue reading Industrial Ransomware Attacks: New Groups Emerge, Manufacturing Pays Highest Ransom
Cisco has confirmed that two vulnerabilities affecting one of its VPN products are being exploited in the wild.
read more Continue reading Cisco Confirms In-the-Wild Exploitation of Two VPN Vulnerabilities
The US Cybersecurity and Infrastructure Security Agency (CISA) has added two Cisco and four Gigabyte product flaws to its Known Exploited Vulnerabilities catalog. Only one of the Gigabyte vulnerabilities was previously mentioned as being involved in at… Continue reading CISA Warns of Attacks Exploiting Cisco, Gigabyte Vulnerabilities
The US Cybersecurity and Infrastructure Security Agency (CISA) has added two Cisco and four Gigabyte product flaws to its Known Exploited Vulnerabilities catalog. Only one of the Gigabyte vulnerabilities was previously mentioned as being involved in at… Continue reading CISA Warns of Attacks Exploiting Cisco, Gigabyte Vulnerabilities
The Federal Bureau of Investigation on Thursday issued an alert to warn that Iranian cyber group Emennet Pasargad is targeting organizations to steal their data and leak it online.
read more Continue reading FBI Warns of Iranian Cyber Firm’s Hack-and-Leak Operations
Exploitation attempts targeting the Apache Commons Text vulnerability tracked as CVE-2022-42889 and Text4Shell started shortly after its disclosure, according to WordPress security company Defiant.
read more Continue reading Text4Shell Vulnerability Exploitation Attempts Started Soon After Disclosure
The US Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a Linux kernel flaw to its Known Exploited Vulnerabilities Catalog and instructed federal agencies to address it within three weeks.
read more Continue reading CISA Tells Organizations to Patch Linux Kernel Vulnerability Exploited by Malware
The Chinese state-sponsored threat group Winnti has been observed targeting governmental entities in Sri Lanka and Hong Kong in recent campaigns.
read more Continue reading China’s Winnti Group Seen Targeting Governments in Sri Lanka, Hong Kong