MOVEit Transfer Zero Day Under Attack
A critical zero day flaw in all version of MOVEit Transfer is under active attack by multiple threat actors.
He is one of the co-founders of Threatpost and previously wrote for TechTarget and eWeek, when magazines were still a thing that existed. Dennis enjoys finding the stories behind the headlines and digging into the motivations and thinking of both defenders and attackers. His work has appeared in The Boston Globe, The Improper Bostonian, Harvard Business School’s Working Knowledge, and most of his kids’ English papers.
A critical zero day flaw in all version of MOVEit Transfer is under active attack by multiple threat actors.
A group known as Volt Typhoon, that is affiliated with the Chinese government, has been attacking critical infrastructure in...
A Chinese state-affiliated attack group known as Camaro Dragon is targeting some TP-Link routers to install malicious firmware...
Microsoft has patched two flaws (CVE-2023-29336 and CVE-2023-24932) that have been actively exploited.
The newest version of the EARNT IT Act still has language that would force platform providers to weaken or abandon encrypted services.
Apple and Google have submitted a draft IETF specification to alert users when they are being tracked by Bluetooth accessories such as AirTags.
Google is enabling passkeys as a login method for all accounts as part of its effort to move users away from passwords to more secure authentication methods.
Enterprise networks have evolved rapidly in recent years, but the security industry hasn't been as agile and is not keeping up with the pace of change.