The CISA orders US federal civilian agencies to patch or remove VMware products affected by a critical RCE vulnerability that hackers are actively exploiting
Security flaws in VMware and F5's BIG-IP are being exploited by malicious hackers. — Malicious hackers, some believed to be state-backed … Source: CISA , VMware , CISA , and CISA...
US Cyber Command and CISA urge US organizations to immediately patch a critical Atlassian Confluence remote code execution flaw that is under mass exploitation
US Cyber Command (USCYBERCOM) has issued a rare alert today urging US organizations to patch a massively exploited Atlassian Confluence critical vulnerability immediately.Source:@c...
US Cyber Command and CISA urge US organizations to immediately patch a critical Atlassian Confluence remote code execution flaw that is under mass exploitation
US Cyber Command (USCYBERCOM) has issued a rare alert today urging US organizations to patch a massively exploited Atlassian Confluence critical vulnerability immediately. Source: ...
Researchers detail two new local privilege escalation vulnerabilities, one in recent builds of Windows 10 and the preview of Windows 11, and the other in Linux
Both OSes have flaws that allow attackers with a toehold to elevate access. — The world woke up on Tuesday to two new vulnerabilities … Source: US-CERT , Qualys Security Blog , a...
In a post on the REvil dark web blog, the gang takes credit for the Kaseya attack, claims it infected 1M+ systems, and demands $70M in bitcoin for the decryptor
The REvil ransomware gang is asking for a $70 million ransom payment to publish a universal decryptor that can unlock …
President Biden says he has directed US intelligence agencies to investigate the Kaseya ransomware attack and adds “we're not certain” who is behind the attack
Trevor Hunnicutt / Reuters :
Microsoft says a DNS outage causing issues with services like Teams, Azure, and Office 365 is mostly over, cites spike in DNS traffic as preliminary root cause
If a Bing goes down and no one is around, did it even happen? — What you need to know — Several Microsoft services …
IT security company Ivanti has acquired enterprise mobile security firm MobileIron for $872M in stock and corporate VPN provider Pulse Secure for an unknown sum
Zack Whittaker / TechCrunch :
CISA: hacking groups linked to China's Ministry of State Security have exploited F5, Citrix, Pulse Secure, and Microsoft Exchange bugs to hack US gov't networks
Chinese Ministry of State Security-Affiliated Cyber Threat Actor Activity Ravie Lakshmanan / The Hacker News : CISA: Chinese Hackers Exploiting Unpatched Devices to Target U.S. Age...
Microsoft releases a patch for the wormable flaw in Windows 10 and Windows Server 2019 that leaked this week
Catalin Cimpanu / ZDNet :
Microsoft releases a patch for the wormable flaw in Windows 10 and Windows Server 2019 that leaked this week
Catalin Cimpanu / ZDNet :
FBI: nation-state hackers breached the networks of two US municipalities last year, targeting a Microsoft SharePoint vulnerability that was patched in February
Catalin Cimpanu / ZDNet : Tweets: @gossithedog , @bad_packets , @protaapp , and @dangoodin001 Tweets: Kevin Beaumont / @gossithedog : This SharePoint vulnerability CVE-2019-0604 f...
Researchers: unpatched flaws in Citrix products leave 80,000+ businesses potentially vulnerable to unauthorized network access; Cisco shares steps to mitigate
Sergiu Gatlan / BleepingComputer :
Researchers: unpatched flaws in Citrix products leave 80,000+ businesses potentially vulnerable to unauthorized network access; Cisco shares steps to mitigate
A newly discovered vulnerability impacting the Citrix Application Delivery Controller (NetScaler ADC) and the Citrix Gateway …
Researchers show how malicious voice apps for Alexa or Google Home eavesdrop on users, as Amazon and Google take a lax approach to vetting the platforms
Exclusive: Amazon, Google fail to address security loopholes in Alexa and Home devices more than a year after first reports.
Researcher who was banned from Valve's HackerOne bug bounty program after submitting a Steam 0-day that Valve downplayed, reveals details of another Steam 0-day
Catalin Cimpanu / ZDNet :