Security news that informs and inspires

All Articles

2324 articles:

U.S., UK Sanction Russian APT Members

The NSA, UK's National Cyber Security Centre (NCSC) and Microsoft detailed recent changes in TTPs from a known Russian threat group.

Russia, Government Agencies

Decipher Podcast: Nathan Hamiel

Nathan Hamiel, senior director of research at Kudelski Security, talks about the intersection between AI and cybersecurity.

AI

Researchers Detail Sierra Wireless Router Bugs

Researchers are detailing 21 recently patched vulnerabilities that impact certain Sierra Wireless routers, including one critical-severity and nine high-severity flaws.

Flaw

ColdFusion Exploit Used to Access Federal Agency

In two separate intrusions, attackers exploited a ColdFusion vulnerability (CVE-2023-26360) to compromise an unnamed federal government agency.

Government

Russian Group Targeting Exchange Flaw

Fancy Bear, also known as APT28 and Forest Blizzard, has been targeting a Microsoft Exchange flaw (CVE-2023-23397) against targets in Poland.

Russia, Microsoft

VMware Patches Critical Authentication Bypass Bug

The patch is available two weeks after the vulnerability was first disclosed on Nov. 14.

Vmware

Apple Fixes Two Actively Exploited WebKit Bugs

The bugs (CVE-2023-42916 and CVE-2023-42917) enable sensitive information disclosure and arbitrary code execution.

Apple

U.S. and Allies Sanction Kimsuky Actors

The US and several allies have sanctioned eight North Korean nationals, including alleged members of the Kimsuky APT group.

North Korea

CISA: Threat Actors Targeting Unitronics Devices Used in Water Facilities

CISA is urging water facilities in the critical infrastructure sector to change the default passwords on their Unitronics devices and disconnect them from the internet after a water treatment facility in Pennsylvania was hit by a cyberattack.

OT, CISA

Memory Safe: Shamla Naidoo

Shamla Naidoo of Netskope joins Dennis Fisher to discuss her journey from network admin to CISO.

Podcast

Okta Says Breach Affected All Support Customers

Okta officials said that the September intrusion in its customer support system affected every company in the Okta system.

Data Breach, Okta

International Operation Leads to Ransomware Ringleader Arrest

In a series of raids across Ukraine, the agencies apprehended several individuals that allegedly belong to the group, which has encrypted over 250 servers and cost large corporations several hundreds of millions of euros.

Cybercrime

Ardent Health Services Impacted By Ransomware Attack

On the heels of a ransomware attack, Ardent said facilities are rescheduling elective procedures and diverting some emergency room patients to other local hospitals until systems are back online.

Healthcare

New AI Guidelines Focus on Safety and Security of Models, Data

New AI guidelines authored by CISA and the UK's NCSC stress the importance of secure design, development, deployment, and operation of AI models and tools.

AI, Government

Stealthy Malware Leverages MQTT Protocol in Spam Campaigns

Researchers observed thousands of spam emails delivering the WailingCrab malware that were sent to targets in North and South America, Europe and Asia.

Spam, Malware