Security Intelligence
CISA warns threat actors targeting water, other industrial systems
CISA warns threat actors actively attempting to breach systems associated with water and other critical infrastructure...
Security Intelligence
Critical vulnerability in Ivanti vTM now exploited
CISA adds critical vulnerability in Ivanti’s vTM to its Known Exploited Vulnerabilities catalog.
Security Intelligence
U.S. proposes ban on Chinese/Russian connected vehicles
White House proposes a ban on the import and sale of connected vehicles built by companies with a Chinese or Russian...
Security Intelligence
Another critical vulnerability in Ivanti CSA exploited
Ivanti is reporting that a new vulnerability in its Cloud Service Appliance (CSA) is being actively exploited in the...
Security Intelligence
GitLab patches max-severity authentication bypass vulnerability
GitLab has released an update to address a maximum-severity SAML vulnerability in self-managed deployments.
Security Intelligence
FBI derails Chinese ‘Raptor Train’
FBI dismantles massive China-linked botnet, dubbed ‘Raptor Train’, consisting of 260,000+ compromised small office/home...
Security Intelligence
Lazarus targets aerospace and energy job seekers
Lazarus once again leveraging job-themed attack vector to target job seekers in the energy and aerospace industry.
Security Intelligence
SolarWinds patches two Access Rights Manager vulnerabilities
SolarWinds releases updates to address two vulnerabilities in its Access Rights Manager (ARM) software.
Security Intelligence
Exploit available for critical Ivanti EPM vulnerability, patch now
Proof-of-concept (PoC) exploit code for a critical vulnerability in Ivanti’s Endpoint Management (EPM) software...
Security Intelligence
High-severity vulnerability in Ivanti Cloud Service actively exploited
Recently patched high-severity vulnerability in its Ivanti CSA actively exploited by threat actors to conduct remote...
Security Intelligence
Malware annoys victims into giving up Google password
New Amadey malware designed to annoy and frustrate victims into giving up Google credentials.
Security Intelligence
GitLab patches highly critical pipeline job execution flaw
GitLab has released updates to address multiple recently discovered vulnerabilities, one of which is highly critical...