Category: Uncategorized
-
F5 BIG-IP Configuration Utility Authentication Bypass (CVE-2023-46747)
What is the Attack? The vulnerability allows an unauthenticated attacker to exploit an authentication bypass vulnerability in F5 BIG-IP system. The exploit requires a network access through the management port to execute arbitrary system commands. F5 has warned their customers that threat actors are actively exploiting the vulnerability. What is the Vendor Solution? F5 has…
-
Zero-Day Alert: Lace Tempest Exploits SysAid IT Support Software Vulnerability [email protected] (The Hacker News)
The threat actor known as Lace Tempest has been linked to the exploitation of a zero-day flaw in SysAid IT support software in limited attacks, according to new findings from Microsoft. Lace Tempest, which is known for distributing the Cl0p ransomware, has in the past leveraged zero-day flaws in MOVEit Transfer and PaperCut servers. The issue, tracked as CVE-2023-47246,…
-
Lace Tempest exploits SysAid zero-day vulnerability
Post ContentRead More
-
Medical Company Fined $450,000 by New York AG Over Data Breach Eduard Kovacs
A medical company has been fined $450,000 by the New York AG over a data breach that may have involved exploitation of a SonicWall vulnerability. The post Medical Company Fined $450,000 by New York AG Over Data Breach appeared first on SecurityWeek. Read More
-
Tidal Cyber Raises $5 Million for Threat-Informed Defense Platform Ionut Arghire
The Washington, DC startup is building a threat-informed defense platform that helps organizations automate detection and response work. The post Tidal Cyber Raises $5 Million for Threat-Informed Defense Platform appeared first on SecurityWeek. Read More
-
‘BlazeStealer’ Malware Delivered to Python Developers Looking for Obfuscation Tools Ionut Arghire
Checkmarx uncovers a malicious campaign targeting Python developers with malware that takes over their systems. The post ‘BlazeStealer’ Malware Delivered to Python Developers Looking for Obfuscation Tools appeared first on SecurityWeek. Read More
-
Major ChatGPT Outage Caused by DDoS Attack Eduard Kovacs
ChatGPT and its API have experienced a major outage due to a DDoS attack apparently launched by Anonymous Sudan. The post Major ChatGPT Outage Caused by DDoS Attack appeared first on SecurityWeek. Read More
-
New Malvertising Campaign Uses Fake Windows News Portal to Distribute Malicious Installers [email protected] (The Hacker News)
A new malvertising campaign has been found to employ fake sites that masquerade as legitimate Windows news portal to propagate a malicious installer for a popular system profiling tool called CPU-Z. “This incident is a part of a larger malvertising campaign that targets other utilities like Notepad++, Citrix, and VNC Viewer as seen in its infrastructure (domain…
-
emergency communications plan (EC plan)
Post ContentRead More
-
Risk Ledger Raises £6.25 Million for Supply Chain Security Solution Ionut Arghire
UK-based Risk Ledger has raised £6.25 million (~$7.65 million) in Series A funding to prevent supply chain attacks. The post Risk Ledger Raises £6.25 Million for Supply Chain Security Solution appeared first on SecurityWeek. Read More