Rockwell Automation is urging its customers to disconnect all industrial control systems (ICSs) not meant to be connected to the public-facing internet to mitigate unauthorized or malicious cyber activity. The… Read More »Rockwell Advises Disconnecting Internet-Facing ICS Devices Amid Cyber Threats
Since the first edition of The Ultimate SaaS Security Posture Management (SSPM) Checklist was released three years ago, the corporate SaaS sprawl has been growing at a double-digit pace. In large enterprises,… Read More »The Ultimate SaaS Security Posture Management Checklist, 2025 Edition
Cybersecurity researchers have discovered a new cryptojacking campaign that employs vulnerable drivers to disable known security solutions (EDRs) and thwart detection in what’s called a Bring Your Own Vulnerable Driver (BYOVD) attack.… Read More »GHOSTENGINE Exploits Vulnerable Drivers to Disable EDRs in Cryptojacking Attack
An unknown threat actor is exploiting known security flaws in Microsoft Exchange Server to deploy a keylogger malware in attacks targeting entities in Africa and the Middle East. Russian cybersecurity… Read More »MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks
Popular enterprise services provider Zoom has announced the rollout of post-quantum end-to-end encryption (E2EE) for Zoom Meetings, with support for Zoom Phone and Zoom Rooms coming in the future. “As… Read More »Zoom Adopts NIST-Approved Post-Quantum End-to-End Encryption for Meetings
Taiwanese company QNAP has rolled out fixes for a set of medium-severity flaws impacting QTS and QuTS hero, some of which could be exploited to achieve code execution on its network-attached storage… Read More »QNAP Patches New Flaws in QTS and QuTS hero Impacting NAS Appliances
Users of Veeam Backup Enterprise Manager are being urged to update to the latest version following the discovery of a critical security flaw that could permit an adversary to bypass… Read More »Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass
GitHub has rolled out fixes to address a maximum severity flaw in the GitHub Enterprise Server (GHES) that could allow an attacker to bypass authentication protections. Tracked as CVE-2024-4985 (CVSS score: 10.0),… Read More »Critical GitHub Enterprise Server Flaw Allows Authentication Bypass
A new attack campaign dubbed CLOUD#REVERSER has been observed leveraging legitimate cloud storage services like Google Drive and Dropbox to stage malicious payloads. “The VBScript and PowerShell scripts in the CLOUD#REVERSER inherently… Read More »Malware Delivery via Cloud Services Exploits Unicode Trick to Deceive Users
The persistent threat actors behind the SolarMarker information-stealing malware have established a multi-tiered infrastructure to complicate law enforcement takedown efforts, new findings from Recorded Future show. “The core of SolarMarker’s operations is… Read More »SolarMarker Malware Evolves to Resist Takedown Attempts with Multi-Tiered Infrastructure