Active exploitation of the CVE-2022-47966 ManageEngine flaw is underway.
U.S. authorities have arrested Anatoly Legkodymov, the Russian alleged operator of the Bitzlato cryptocurrency exchange, which they say was a major hub for cybercriminal activity.
By looking at metadata in LNK files in recent campaigns, Talos researchers have linked the Bumblebee malware with the Qakbot and IcedID malware groups.
A set of serious flaws in the Contec CONPROSYS HMI software that could allow remote code execution have been addressed in an update.
A new bill would provide funding for security research at the university level into threats to the energy sector.