Category: Uncategorized
-
Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager [email protected] (The Hacker News)
Ivanti on Tuesday rolled out fixes to address multiple critical security flaws in Endpoint Manager (EPM) that could be exploited to achieve remote code execution under certain circumstances. Six of the 10 vulnerabilities – from CVE-2024-29822 through CVE-2024-29827 (CVSS scores: 9.6) – relate to SQL injection flaws that allow an unauthenticated attacker within the same network toRead…
-
The End of an Era: Microsoft Phases Out VBScript for JavaScript and PowerShell [email protected] (The Hacker News)
Microsoft on Wednesday outlined its plans to deprecate Visual Basic Script (VBScript) in the second half of 2024 in favor of more advanced alternatives such as JavaScript and PowerShell. “Technology has advanced over the years, giving rise to more powerful and versatile scripting languages such as JavaScript and PowerShell,” Microsoft Program Manager Naveen Shankar said. “These…
-
Genesis Market Malware Attack
What is the attack?FortiGuard Lab’s EDR team recently identified malware infection exhibiting strong similarities to the previously reported Genesis Market malicious campaign that was dismantled by law enforcement in early 2023. The investigation traced some initial compromises to tools used for circumventing software licensing and counterfeit GPG MSI installers embedded with PowerShell scripts. Following the…
-
SOCRadar Raises $25M Series B for Threat Intel Tech SecurityWeek News
Delaware startup secures a $25 million Series B funding round from PeakSpan Capital and Oxx. SOCRadar has raised to $30.2 million to date. The post SOCRadar Raises $25M Series B for Threat Intel Tech appeared first on SecurityWeek. Read More
-
Researchers Warn of Chinese-Aligned Hackers Targeting South China Sea Countries [email protected] (The Hacker News)
Cybersecurity researchers have disclosed details of a previously undocumented threat group called Unfading Sea Haze that’s believed to have been active since 2018. The intrusion singled out high-level organizations in South China Sea countries, particularly military and government targets, Bitdefender said in a report shared with The Hacker News. “The investigation revealed a troublingRead More
-
US to Invest $50 Million in Securing Hospitals Against Cyber Threats Ionut Arghire
ARPA-H has announced a $50 million investment in tools to help IT teams better secure hospital environments. The post US to Invest $50 Million in Securing Hospitals Against Cyber Threats appeared first on SecurityWeek. Read More
-
Rockwell Automation Urges Customers to Disconnect ICS From Internet Eduard Kovacs
Rockwell Automation is concerned about internet-exposed ICS due to heightened geopolitical tensions and adversarial cyber activity globally. The post Rockwell Automation Urges Customers to Disconnect ICS From Internet appeared first on SecurityWeek. Read More
-
Rockwell Advises Disconnecting Internet-Facing ICS Devices Amid Cyber Threats [email protected] (The Hacker News)
Rockwell Automation is urging its customers to disconnect all industrial control systems (ICSs) not meant to be connected to the public-facing internet to mitigate unauthorized or malicious cyber activity. The company said it’s issuing the advisory due to “heightened geopolitical tensions and adversarial cyber activity globally.” To that end, customers are required to take immediateRead More
-
Critical Veeam Vulnerability Leads to Authentication Bypass Ionut Arghire
Veeam Backup Enterprise Manager update resolves multiple vulnerabilities, including a critical authentication bypass. The post Critical Veeam Vulnerability Leads to Authentication Bypass appeared first on SecurityWeek. Read More
-
Critical Authentication Bypass Resolved in GitHub Enterprise Server Ionut Arghire
Critical vulnerability in GitHub Enterprise Server allows unauthenticated attackers to obtain administrative privileges. The post Critical Authentication Bypass Resolved in GitHub Enterprise Server appeared first on SecurityWeek. Read More