HOME BLUE TEAM RED TEAM NEWS SCHEDULES CONTACT

NEWS

Latest Hacking News | Cyber Security News, Hacking •

Safeguarding ERP Systems in the Digital Age: The Crucial Role of NetSuite Support in Cyber Defense

An enterprise resource planning tool is a software program that unifies business operations. The most popular product on the market for business owners and executives is NetSuite’s cloud-based ERP. Maintained by remote servers, your company can manage numerous operations on this platform, including accounting, supply chain management, data collection, leadership initiatives, and more.

However, using an ERP system can elevate concerns about cybersecurity in 2024. As technology improves, the tact
Latest Hacking News | Cyber Security News, Hacking •

Xiid SealedTunnel: Unfazed by Yet Another Critical Firewall Vulnerability (CVE-2024-3400)

In the wake of the recent disclosure of a critical vulnerability (CVE-2024-3400) affecting a leading firewall solution, Xiid Corporation reminds organizations that Xiid SealedTunnel customers remain secure. This latest vulnerability, currently unpatched and rated 10/10 on the CVSS (Common Vulnerability Scoring System), highlights the limitations of traditional security approaches.

Xiid SealedTunnel, the world’s first and only Zero Knowledge Networking (ZKN) solution, goes beyond Zero Trust arch
Latest Hacking News | Cyber Security News, Hacking •

Guardz Welcomes SentinelOne as Strategic Partner and Investor to Boost Cybersecurity Defenses for SMBs

[Miami, FL – April 16, 2023] – Guardz, the cybersecurity company securing and insuring small and medium-sized businesses, today announced a strategic partnership with SentinelOne, the leader in AI-powered security. The partnership includes an investment from S Ventures, SentinelOne’s venture fund. Guardz and SentinelOne will collaborate on technological advancements and go-to- market strategies, together empowering Managed Service Providers (MSPs) to better serve their small and medium-sized bus
Latest Hacking News | Cyber Security News, Hacking •

Personal Data Exposed in Massive Global Hack: Understanding the Implications & Guarding Privacy- Axios Security Group

In a digital age where information is the new currency, the recent global hack has once again highlighted the urgent need for enhanced cybersecurity measures.

The breach was identified as Midnight Blizzard, from the Russian state-sponsored actor known as NOBELIUM. It has affected Millions of individuals and government agencies worldwide, underscoring the far-reaching consequences of cyberattacks and the critical importance of protecting sensitive information.

The Scope of the Breach

The scale
Latest Hacking News | Cyber Security News, Hacking •

Microsoft April Patch Tuesday Fixes Dozens of RCE Flaws

This month’s Patch Tuesday update bundle from Microsoft is a huge one, requiring immediate user attention for device updates. Specifically, with April 2024 Patch Tuesday, Microsoft addressed 150 different security flaws, including over 60 remote code execution vulnerabilities.

Two Zero-Day Vulnerabilities And Three Critical Flaws Addressed

With April 2024 updates, Microsoft patched two zero-day vulnerabilities, both actively exploited for malware attacks. These include,
• CVE-2024-29988 (CVSS
Latest Hacking News | Cyber Security News, Hacking •

Invision Community Vulnerabilities Risk E-Commerce Websites

A security researcher spotted numerous vulnerabilities in the Invision Community software that risked the corresponding e-commerce websites. While the vendors patched one of the two flaws, the other still remains a zero-day despite public disclosure.

Invision Community software vulnerabilities could allow hacking the vulnerable websites, which even include some major brands. According to the researcher Egidio Romano, some of the Invision Community websites include popular names like Evernote, S
Latest Hacking News | Cyber Security News, Hacking •

How Artificial Intelligence Technology Affects Fintech Companies & The Financial Industry

The modern fintech sector is the result of the introduction of new technologies and approaches, due to which this field is actively growing and developing every day.

One of the key aspects of financial technology is the implementation of artificial intelligence. AI is a game changer that can revolutionize the financial industry in many ways.

The benefits of AI software development solutions in financial technology are enormous. This innovation reduces unnecessary costs, optimizes financial man
Latest Hacking News | Cyber Security News, Hacking •

Cypago Announces New Automation Support for AI Security and Governance

Cyber GRC software company Cypago has announced a new automation solution for artificial intelligence (AI) governance, risk management and compliance. This includes implementation of NIST AI RMF and ISO/IEC 42001, the newest AI security and governance frameworks. With more and more companies integrating new AI tools into their business processes, daily operations, and customer-facing products and services, safe and compliant use of AI has become a pivotal challenge.

Enterprises are adopting AI-
Latest Hacking News | Cyber Security News, Hacking •

Match Systems publishes report on the consequences of CBDC implementation, led by CEO Andrei Kutin

Match Systems, a leading authority in crypto crimes investigations and crypto AML solutions provider, has published a comprehensive analytical report examining the potential implications of Central Bank Digital Currency (CBDC) implementation.

In a landscape where the debate between cryptocurrency proponents and CBDC advocates intensifies, Kutin’s report offers a balanced perspective on the advantages and drawbacks of transitioning to a digital currency framework. The report delves into the nuan
Latest Hacking News | Cyber Security News, Hacking •

Mitigating the Impact of Data Breaches Through DDR

The theft or loss of confidential information costs companies millions of dollars annually. Research revealed that a single leaked data record cost $165 on average in 2023. In addition, the average cost of a data breach incident rose to $4.45 million. This figure includes detection, business losses, post-breach response, and notification. The most significant expense emerged as the costs associated with detecting and escalating the breach.

This is before taking into account the immeasurable cos
Latest Hacking News | Cyber Security News, Hacking •

Exploring HelpWire: A New Option in Free Remote Support Software

In the ever-growing domain of remote support applications, HelpWire emerges as a newcomer, bringing significant promises to the table. Its uniqueness lies not only in its affordability, providing a wide array of features for remote management free of charge for both business and individual users, but also in its strong suite of functionalities designed to improve the remote support experience.

HelpWire, a free remote support software, offers a quick, secure, and user-friendly remote access solu
Latest Hacking News | Cyber Security News, Hacking •

"Let’s Get the Third Party Started In Here,"

This March marks a pivotal moment for Apple, as they roll out iOS 17.4 in alignment with the EU’s Digital Markets Act (the DMA). For the first time since the launch of the App Store in 2008, Apple is opening the doors of its iOS platform to third-party app stores.

This groundbreaking change means users can now install apps from beyond the Apple App Store, as long as these new platforms meet Apple’s approval criteria. This update not only provides users with more app choices that might not fit A
BleepingComputer •

Implementing container security best practices using Wazuh

The concept of containerization has changed how applications are deployed and managed, offering flexibility and scalability. These changes have made compliance with security standards in containerized environments an important area of focus.

Maintaining visibility into container hosts, ensuring adherence to best practices, and conducting vulnerability assessments are some concerns in ensuring effective security.

This article will explore how Wazuh helps implement best security practices for co
BleepingComputer •

New SharePoint flaws help hackers evade detection when stealing files

Researchers have discovered two techniques that could enable attackers to bypass audit logs or generate less severe entries when downloading files from SharePoint.

Microsoft SharePoint is a web-based collaborative platform that integrates with Microsoft Office and 365, primarily as a document management and data storage system.

Many companies use it for document management and collaboration, creating websites and corporate intranets, automating complex workflows, and enterprise content managem
BleepingComputer •

Over 90,000 LG Smart TVs may be exposed to remote attacks

Security researchers at Bitdefender have discovered four vulnerabilities impacting multiple versions of WebOS, the operating system used in LG smart TVs.

The flaws enable varying degrees of unauthorized access and control over affected models, including authorization bypasses, privilege escalation, and command injection.

The potential attacks hinge on the ability to create arbitrary accounts on the device using a service that runs on ports 3000/3001, which is available for smartphone connectiv
BleepingComputer •

RUBYCARP hackers linked to 10-year-old cryptomining botnet

A Romanian botnet group named 'RUBYCARP' is leveraging known vulnerabilities and performing brute force attacks to breach corporate networks and compromise servers for financial gain.

According to a new report by Sysdig, RUBYCARP currently operates a botnet managed via private IRC channels comprising over 600 compromised servers.

Sysdig has found 39 variants of the RUBYCARP botnet's Perl-based payload (shellbot), with only eight appearing on VirusTotal, illustrating low detection rates for the
BleepingComputer •

Microsoft April 2024 Patch Tuesday fixes 150 security flaws, 67 RCEs

Update 4/9/24: Added information on two zero-day vulnerabilities that Microsoft did not initially mark as exploited.

Today is Microsoft's April 2024 Patch Tuesday, which includes security updates for 150 flaws and sixty-seven remote code execution bugs.

Only three critical vulnerabilities were fixed as part of today's Patch Tuesday, but there are over sixty-seven remote code execution bugs. More than half of the RCE flaws are found within Microsoft SQL drivers, likely sharing a common flaw.

T
BleepingComputer •

Windows 11 KB5036893 update released with 29 changes, Moment 5 features

Microsoft has released the KB5036893 cumulative update for Windows 11 23H3, which includes 29 changes and fixes and enables the Moment 5 features for every user.

This update is mandatory as it contains the Microsoft April 2024 Patch Tuesday security updates, which fixed sixty vulnerabilities in Microsoft's products.

You can install the update now by going to Start > Settings > Windows Update and clicking on 'Check for Updates.' Otherwise, Microsoft will attempt to install it during your normal
BleepingComputer •

GHC-SCW: Ransomware gang stole health data of 533,000 people

Non-profit healthcare service provider Group Health Cooperative of South Central Wisconsin (GHC-SCW) has disclosed that a ransomware gang breached its network in January and stole documents containing the personal and medical information of over 500,000 individuals.

However, the attackers couldn't encrypt the compromised devices, which allowed GHC-SCW to secure its systems with the help of external cyber incident response experts and bring them back online after they were isolated to contain th
BleepingComputer •

Windows 10 KB5036892 update released with 23 new fixes, changes

Microsoft has released the KB5036892 cumulative update for Windows 10 21H2 and Windows 10 22H2 with twenty-three changes and two new features.

Windows users can install this update by going into Settings, clicking on Windows Update, and manually performing a 'Check for Updates.'

However, as this update is mandatory, it will automatically start installing in Windows once you check for updates. To make this more manageable, you can schedule a time when your computer is restarted to finish the in
BleepingComputer •

Critical Rust flaw enables Windows command injection attacks

Threat actors can exploit a security vulnerability in the Rust standard library to target Windows systems in command injection attacks.

Tracked as CVE-2024-24576, this flaw is due to OS command and argument injection weaknesses that can let attackers execute unexpected and potentially malicious commands on the operating system.

GitHub rated this vulnerability as critical severity with a maximum CVSS base score of 10/10. Unauthenticated attackers can exploit it remotely, in low-complexity attac
BleepingComputer •

Microsoft fixes two Windows zero-days exploited in malware attacks

Microsoft has fixed two actively exploited zero-day vulnerabilities during the April 2024 Patch Tuesday, although the company failed to initially tag them as such.

The first, tracked as CVE-2024-26234 and described as a proxy driver spoofing vulnerability, was issued to track a malicious driver signed using a valid Microsoft Hardware Publisher Certificate that was found by Sophos X-Ops in December 2023 and reported by team lead Christopher Budd.

This malicious file was labeled as "Catalog Auth
Latest Hacking News | Cyber Security News, Hacking •

Evolving Trends in Cloud Data Protection for 2024

The way we protect our cloud data is undergoing significant transformations. With the increasing reliance on cloud storage and computing, ensuring the security and integrity of data has never been more critical. This year, emerging trends in cloud data protection are set to redefine how organizations approach security, scalability, and compliance. Let’s dive into the evolving landscape of cloud data protection in 2024, exploring its new horizons with a touch of playfulness.

The Shift Towards Ze
Latest Hacking News | Cyber Security News, Hacking •

Understanding Cybersecurity Basics for Businesses

Protecting data from cyber threats has become a paramount concern for businesses of all sizes. Cybersecurity, once a niche IT concern, is now a foundational aspect of running a modern business. This article aims to demystify the basics of cybersecurity for businesses to help empower organizations in their digital defense efforts.

Cybersecurity isn’t just a business concern; it’s a societal one. The repercussions of a cyber breach can extend far beyond the confines of the affected business, impa
Cyber Security News •

Hackers Posing as LastPass Employee to Steal Master Password & Hijack Accounts

In a sophisticated cyber attack, hackers have been discovered impersonating LastPass employees in an elaborate phishing campaign designed to steal users’ master passwords and hijack their accounts.

This alarming development was recently highlighted by LastPass on their official blog, shedding light on the dangers posed by the CryptoChameleon phishing kit.

The campaign, initially identified by cybersecurity firm Lookout, utilizes the CryptoChameleon phishing kit—a notorious tool linked to previ
The CyberWire •

From phishing to felony.

A major Phishing-as-a-service operation gets taken down by international law enforcement. US election officials are warned of nation-state influence operations. The house votes to limit the feds’ purchase of citizens personal data. A Michigan healthcare provider suffered a ransomware attack. Critical infrastructure providers struggle to trust cybersecurity tools. Cloudflare reports on DDoS. Kaspersky uncovers new Android banking malware. Kubernetes cryptominers leverage previously patched flaws.
Malwarebytes •

Cannabis investment scam JuicyFields ends in 9 arrests

Europol and its associates have arrested 9 people in conjunction with a cannabis investment scam known as “JuicyFields”.

The suspects used social media to lure investors to their website. There they found information about a “golden opportunity” to invest in the cultivation, harvesting and distribution of cannabis plants to be used for medicinal purposes.

Taken from the JuicyFields website:

The scheme looked like a crowdsourcing scheme with a minimal investment of € 50, and played on recent d
Malwarebytes •

Mental health company Cerebral failed to protect sensitive personal data, must pay $7 million

The Federal Trade Commission (FTC) has reached a settlement with online mental health services company Cerebral after the company was charged with failing to secure and protect sensitive health data.

Cerebral has agreed to an order that will restrict how the company can use or disclose sensitive consumer data, as well as require it to provide consumers with a simple way to cancel services.

After a data breach in 2023 Cerebral disclosed that it had been using invisible pixel trackers from Googl
Malwarebytes •

Law enforcement reels in phishing-as-a-service whopper

A major international law enforcement effort involving agencies from 19 countries has disrupted the notorious LabHost phishing-as-a-service platform.

Europol reports that the organization’s infrastructure has been compromised, its website shut down, and 37 suspects arrested, including four people in the UK linked to the running of the site, which also allegedly included the original developer of the service.

Europol’s announcement also hints that this isn’t the end of the story, and users of t
Cyber Security News •

Cisco Unveils Hypershield: AI-Powered Automated Vulnerability Shield

Cisco introduced its latest innovation, Cisco Hypershield, marking a significant milestone in the evolution of cybersecurity.

Described as the most consequential security product in the company’s history, Hypershield is a cloud-native, AI-powered solution designed to enhance the security of AI-scale data centers.

This new technology is integrated directly into the network’s fabric, offering a revolutionary approach to protecting digital infrastructures.

Cisco Hypershield represents a paradigm
Cyber Security News •

Authorities Busted Cybercrime Platform That Steal Passwords & Card Details

International law enforcement agencies have successfully dismantled a notorious cybercrime platform, LabHost, which facilitated criminals in conducting phishing attacks to steal sensitive information such as passwords, addresses, and card details from unsuspecting victims worldwide.

This collaborative effort underscores the increasing global commitment to combating cybercrime and protecting citizens from online fraud.

The operation, named Stargrew, saw the Metropolitan Police, the City of Lond
Cyber Security News •

Kubernetes Clusters Under Attack: Critical OpenMetadata Vulnerabilities Exploited

Microsoft Security recently revealed a sophisticated cyber-attack campaign that targets Kubernetes clusters by exploiting newly discovered vulnerabilities in the OpenMetadata platform.

The attackers have set their sights on Kubernetes workloads, leveraging critical vulnerabilities in the OpenMetadata platform to infiltrate and exploit these systems for cryptomining activities.

OpenMetadata, an open-source platform designed for comprehensive metadata management across various data sources, has
Cyber Security News •

Chrome Security Update: 23 Vulnerabilities Fixed in Latest Release

Google has announced a comprehensive update to the Chrome and Extended Stable channels.

The latest release, version 124.0.6367.60/.61 for Windows and Mac and version 124.0.6367.60 for Linux, addresses 23 security vulnerabilities.

This update underscores Google’s ongoing commitment to safeguarding users against the evolving landscape of cyber threats.

The update has been rolled out for Chrome and Extended Stable channels.

The new version is 124.0.6367.60/.61 for Windows and Mac users, while L
Cyber Security News •

R00TK1T Claims that They have Acquired Confidential Data from Nestle

The hacker group known as R00TK1T has announced that it has successfully entered the systems of Nestle, the world’s largest food and beverage company, and acquired confidential data.

The claim was made through a social media post, which has since caught the attention of cybersecurity experts and corporate watchdogs.

R00TK1T took to social media to declare their latest cyber conquest.

In a ThreatMon tweet that has since circulated among cybersecurity forums, the group boasted about breaching N
Cyber Security News •

“Cybercrime Index” Ranks: Russia, Ukraine, and China at the Top

A new “Cybercrime Index” has been introduced, ranking countries based on the threat level posed by cybercriminals.

The Index reveals that many countries, led by Russia, Ukraine, and China, are the primary hubs for cybercriminal activities globally.

The World Cybercrime Index, developed through a partnership between the University of Oxford, and UNSW, and funded by the European Union-supported CRIMGOV project, provides a detailed ranking of countries based on their cybercrime capabilities and a
Cyber Security News •

Cerber Linux Ransomware Exploits Atlassian Servers To Take Full Control

Hackers often use Linux ransomware due to its prevalence in server environments. This type of ransomware offers higher potential payouts from organizations with critical data.

Cybersecurity analysts at Cado Security Labs recently analyzed the Linux variant of the Cerber ransomware, which is being deployed on Confluence servers via CVE-2023-22518, after receiving recent reports.

Unlike the well-covered Windows version, little is known about the Linux variant.

It consists of three highly obfusc
Cyber Security News •

Cisco IMC Command Injection Vulnerability Under Active Attack

An attacker with read-only or higher privileges on a Cisco Integrated Management Controller (IMC) can exploit a command injection vulnerability (CVE-2024-20295) to gain full control (root access) of the underlying operating system.

The vulnerability exists due to insufficient validation of user-supplied input on the IMC CLI and there are no workarounds available, but software updates to address this critical issue have been released.

A Cisco Integrated Management Controller (IMC) vulnerability
Cyber Security News •

New Redline Stealer Variant Leverages Lua Bytecode For Stealthiness

Redline Stealer is a powerful information-stealing malware, and hackers often exploit this stealthy stealer to gain unauthorized access to a victim’s sensitive data.

Threat actors can steal many sensitive and valuable data by exploiting the Redline Stealer.

Threat actors can use The stolen data later for financial gain or other malicious purposes.

Cybersecurity researchers at McAfee recently discovered a new variant of Redline stealer that leverages the Lua Bytecode for stealthiness.

Telemet
The CyberWire •

The rebirth of Russia's cyber warfare.

A Russian hacker group boldly targets critical infrastructure. The Change Healthcare ransomware attack is projected to cost over a billion dollars. Three hundred bucks is the going rate for a SIM swap. PuTTY potentially reveals private keys. Cisco Talos reports a surge in brute-force attacks. Ivanti updates its MDM product. Omni Hotels & Resorts confirm a data breach. Financially motivated hackers target Businesses in Latin America with steganography. A prolific cryptojacker faces decades in pri
Malwarebytes •

Should you share your location with your partner?

Every relationship has its disagreements. Who takes out the trash and washes the dishes? Who plans the meals and writes out the grocery list? And when is it okay to start tracking one another’s location?

Location sharing is becoming the norm between romantic partners—50% of people valued location sharing in their relationships, according to recent research from Malwarebytes—and plenty of couples have found ways to track one another’s location, with consent, in a respectful and transparent way.
Cyber Security News •

Hackers Exploiting TP-Link Archer Command Injection Vulnerability in the Wild

Cybersecurity researchers have uncovered widespread exploitation of a critical vulnerability in TP-Link Archer routers, which has led to the proliferation of botnet threats.

The vulnerability, CVE-2023-1389, allows attackers to execute arbitrary commands on affected devices, potentially granting them access to sensitive information and the ability to hijack the devices for malicious purposes.

TP-Link disclosed and patched the Vulnerability in March 2023. It allows unauthenticated attackers to
Cyber Security News •

Alert! Oracle Releases Critical Patch Update 2024 - 372 Vulnerabilities are Fixed

Oracle has released its Critical Patch Update (CPU) for April 2024, addressing 372 vulnerabilities across multiple products.

The Critical Patch Update provides fixes for security flaws in widely-used Oracle products including Database Server, Fusion Middleware, Enterprise Manager, E-Business Suite, Supply Chain Products Suite, Siebel CRM, Oracle Sun Products, Java SE, and more.

The update includes fixes for several critical security flaws that could allow attackers to remotely execute code, ma
Cyber Security News •

Data Center Ransomware Attacks on Rise: Microsoft SQL Server is Prime Target

Ransomware threats are increasingly targeting data center servers and workloads as the initial step in the attack chain.

These systems may not be up-to-date with recommended patches, often run legacy applications without vendor security updates, or may not be scheduled for patch updates to maintain business continuity.

As a result, data centers face a high risk of cyber attacks and ransomware activities.

Database workloads host sensitive data and power mission-critical business services, maki
Cyber Security News •

How Secure Is Your Active Directory? 5 Critical Vulnerabilities to Watch Out For

Microsoft’s Active Directory (AD) serves as the central nervous system for your organization’s network. It guards company resources by ensuring that only authorized users have access to any given network and database sections.

A well-designed AD structure is a fantastic way to safeguard the company against intended or unintended malicious employee actions and outside attacks that may have pierced your defense systems.

Yet, while it’s vital for operations, AD management is quite complex, especi
Cyber Security News •

LeakyCLI: New Vulnerability Exposes Credentials In AWS, Azure & Google Cloud

Multiple Cloud Service providers like Google Cloud, AWS, and Azure have been discovered with a new vulnerability that has been termed “LeakyCLI.”

As the name suggests, the Command line interfaces of Google Cloud (Gcloud CLI), AWS (AWSCLI), and Azure (Azure CLI) expose sensitive information in the form of environment variables.

This vulnerability was assigned with CVE-2023-36052, and the severity was given as 8.6 (High).

If this vulnerability is subjected to exploitation, threat actors can gai
Cyber Security News •

Hackers Attempted To Takeover JavaScript Project From OpenJS Foundation

Attackers tried to take over the JavaScript project from OpenJS Foundation, which is home to JavaScript projects utilized by billions of websites globally.

This is similar to the incident that was recently disclosed and targeted at the open-source XZ Utils tracked as (CVE-2024-3094).

The XZ Utils software supply chain breach was the outcome of a highly skilled social engineering operation in which the attacker gained the project’s maintainer’s trust over several years by making valid code cont
Cyber Security News •

“Mobile NotPetya”!! Surge in Zero-click Vulnerabilities, Conditions Favour

The cybersecurity community is sounding the alarm about the growing risk of a “mobile NotPetya” event – a self-propagating mobile malware outbreak that could have devastating consequences.

Over the past year, the alarming increase in the discovery and exploitation of zero-click vulnerabilities in mobile operating systems drives this concern.

In 2023 alone, more zero-click vulnerabilities were disclosed than combined in the prior four years.

Experts warn that the conditions are ripe for a mobi
Cyber Security News •

Tor Browser 13.0 Released: What’s New

Tor Browser 13.0.14 has been released, bringing essential security updates to the popular privacy-focused web browser.

This latest version includes updates to the underlying Firefox browser and several bug fixes and improvements.
• Updated Tor to 0.4.8.11: The Tor network software has been updated to the latest stable version, 0.4.8.11, which includes bug fixes and security improvements.
• Firefox 115.10.0 ESR: The browser engine powering Tor Browser has been updated to the latest Extended Supp
Cybersecurity and Infrastructure Security Agency C •

Unitronics Vision Series PLCs | CISA

Successful exploitation of this vulnerability could allow an attacker to log in to the Remote HMI feature, where the PLC may be factory reset, stopped, and restarted.

The following versions of Unitronics Vision 230 PLCs are affected:

Unitronics Vision Standard PLCs allow a remote, unauthenticated individual to retrieve the 'Information Mode' password in plaintext.

CVE-2024-1480 has been assigned to this vulnerability. A CVSS v3.1 base score of 7.5 has been calculated; the CVSS vector string i
Cybersecurity and Infrastructure Security Agency C •

CISA and Partners Release Advisory on Akira Ransomware | CISA

Today, CISA, the Federal Bureau of Investigation (FBI), Europol’s European Cybercrime Centre (EC3), and the Netherlands’ National Cyber Security Centre (NCSC-NL) released a joint Cybersecurity Advisory (CSA), #StopRansomware: Akira Ransomware, to disseminate known Akira ransomware tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) identified through FBI investigations as recently as February 2024.

Evolving from an initial focus on Windows systems to a Linux variant t
Cybersecurity and Infrastructure Security Agency C •

Electrolink FM/DAB/TV Transmitter | CISA


• Vulnerabilities: Authentication Bypass by Assumed-Immutable Data, Reliance on Cookies without Validation and Integrity Checking, Missing Authentication for Critical Function, Cleartext Storage of Sensitive Information

Successful exploitation of these vulnerabilities could allow an attacker to obtain full system access, keep the device from transmitting, escalate privileges, change credentials, and execute arbitrary code.

The following Electrolink transmitters are affected:

Electrolink tran
Cybersecurity and Infrastructure Security Agency C •

RoboDK RoboDK | CISA

Successful exploitation of this vulnerability could result in an attacker crashing the program through heap-based buffer overflow.

The following versions of RoboDK, a robotics development software, are affected:

The affected product is vulnerable to heap-based buffer overflow while processing a specific project file. The resulting memory corruption may crash the application.

CVE-2024-0257 has been assigned to this vulnerability. A CVSS v3 base score of 3.3 has been calculated; the CVSS vector
Cybersecurity and Infrastructure Security Agency C •

Measuresoft ScadaPro | CISA

Successful exploitation of this vulnerability could allow an attacker to escalate their privileges from unprivileged to SYSTEM privileges.

The following versions of ScadaPro, a supervisory control and data acquisition (SCADA) system, are affected:

The entire parent directory - C:\ScadaPro and its sub-directories and files are configured by default to allow user, including unprivileged users, to write or overwrite files.

CVE-2024-3746 has been assigned to this vulnerability. A CVSS v3.1 base s
Cybersecurity and Infrastructure Security Agency C •

Rockwell Automation ControlLogix and GuardLogix | CISA

Successful exploitation of this vulnerability could allow an attacker to cause a major nonrecoverable fault (MNRF) resulting in the product to become unavailable.

The following versions of Rockwell Automation ControlLogix and GuardLogix, programmable logic controllers, are affected:

A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF). If exploited, the affected p
Cybersecurity and Infrastructure Security Agency C •

Siemens Telecontrol Server Basic | CISA

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).


View CSAF
• Vulnerabilities: Inadequate Encryption Strength, Double Free, Integer Overflow or Wraparound, External Control of File Name or Path, Path Traversal, Improper Input Valid
Cybersecurity and Infrastructure Security Agency C •

Siemens Scalance W1750D | CISA

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).


View CSAF

Successful exploitation of these vulnerabilities could allow an attacker to exploit buffer overflow and information disclosure vulnerabilities which could lead to informa
Cybersecurity and Infrastructure Security Agency C •

Siemens SIMATIC WinCC | CISA

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).


View CSAF

Successful exploitation of this vulnerability could allow a local attacker to cause a denial-of-service condition in the runtime of the SCADA system.

The following versi
Cybersecurity and Infrastructure Security Agency C •

Siemens SINEC NMS | CISA

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).


View CSAF
• Vulnerabilities: Improper Check for Unusual or Exceptional Conditions, Improper Limitation of a Pathname to a Restricted Directory

Successful exploitation of these vuln
Cybersecurity and Infrastructure Security Agency C •

Siemens RUGGEDCOM APE1808 | CISA

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).


View CSAF
• Vulnerabilities: Cross-site Scripting, Improper Privilege Management, Improper Check for Unusual or Exceptional Conditions, Truncation of Security-relevant Information,

Major News Resources

Bleeping Computer

The Hacker News

FBI News

CISA Alerts & Advisories

Homeland Security News Wire

NSA Press Releases & Statements

New Exploits