Security Intelligence
Ivanti patches critical EPM vulnerability, increases code review
A critical deserialization of untrusted data vulnerability discovered in Ivanti’s Endpoint Management (EPM) software.
Security Intelligence
China-linked Mustang Panda adds new malware to its toolset
Mustang Panda observed using new malware to facilitate their cyber espionage activities.
Security Intelligence
FBI offers $10m reward for location of Russian hackers
FBI offers a reward for the location of Russian GRU officers charged for their criminal cyber activities toward...
Security Intelligence
Progress Software patches maximum severity vulnerability in LoadMaster
Progress Software has released an emergency update to address a maximum (10/10) severity vulnerability discovered in...
Security Intelligence
Recent critical SonicWall vulnerability ‘potentially’ exploited
Critical vulnerability in several SonicWall firewalls that run SonicOS ‘potentially’ being exploited.
Security Intelligence
Veeam patches 18 high and critical severity vulnerabilities
Veeam has released updates to address 18 high and critical severity vulnerabilities in its Backup & Replication (VBR),...
Security Intelligence
Zyxel patches critical, high-severity flaws in business routers
Zyxel has released updates to address multiple vulnerabilities, one of which was rated critical, discovered in several...
Security Intelligence
‘Voldemort’ backdoor disguised as tax documents
New campaign targeting 70 organizations in the insurance, aerospace, transportation, and education sectors with a...
Security Intelligence
New backdoor malware impersonating Palo Alto’s GlobalProtect
Unknown threat actors observed targeting organizations with a malware disguised as Palo Alto Networks’ GlobalProtect...
Security Intelligence
Iranian hackers ‘tickle’ U.S. and UAE with new backdoor malware
APT33 observed using a new ‘Tickler’ backdoor on the networks of critical infrastructure organizations in both the U.S....
Security Intelligence
MSPs and ISPs breached with Versa Director zero-day vulnerability
Zero-day vulnerability in Versa Director leveraged to compromise ISPs and MSPs.
Security Intelligence
SonicWall patches critical vulnerability in several firewalls
SonicWall patches critical improper access control vulnerability recently discovered in several firewall devices that...