January 31, 2024PressroomVulnerability/Zero Day Ivanti is alerting to two new high-severity flaws in its Connect Secure and Policy Secure products, one of which it says has been subject to targeted…
Category: Cyber Security
Apple warns that changes to iPhone sideloading will increase cyber threats
In an effort to comply with European Union regulations Digital Markets Act (DMA), Apple is make changes to iOS, Safari, and the App Store which would open up its walled…
Hackers exploit flaws in Ivanti VPN to distribute KrustyLoader malware
January 31, 2024PressroomCyber attack/network security A pair of recently revealed zero-day flaws in Ivanti Connect Secure (ICS) virtual private network (VPN) devices were exploited to deliver a Rust-based payload called…
Ivanti Zero-Day patches delayed as “KrustyLoader” attacks the mountain
Attackers are using a pair of critical zero-day vulnerabilities in Ivanti VPNs to deploy a series of Rust-based backdoors, which in turn download a backdoor malware called “KrustyLoader.” The two…
China-linked hackers target key ministries in Myanmar in backdoor raid
January 30, 2024PressroomMalware/cyber espionage The China-based threat actor known as Panda Mustang it is suspected to have targeted Myanmar’s Ministry of Defense and Foreign Affairs as part of a dual…
Exposing MoustachedBouncer, an APT group spying on foreign embassies in Belarus
ESET Search Listen as Jean-Ian Boutin, Director of Threat Research at ESET, reveals the tactics, techniques and procedures of MoustachedBouncer, an APT group targeting foreign embassies in Belarus August 10,…
“Cactus” ransomware hits Schneider Electric
Schneider Electric has been the victim of a cyberattack that hit its Sustainability Business division, and reports so far have attributed it to a growing ransomware operation called “Cactus.” Schneider…
URGENT: GitLab Update: Critical flaw in workspace creation allows files to be overwritten
January 30, 2024PressroomDevSecOps/Vulnerabilities GitLab has once again released fixes to address a critical security flaw in its Community Edition (CE) and Enterprise Edition (EE) that could be exploited to write…
20,000 Security Workers in the Desert – Security Week with Tony Anscombe
video It’s no surprise that AI was the focus of this year’s Black Hat, one of the world’s largest gatherings of cybersecurity professionals August 11, 2023 • , 0 minutes…
We face 50,000 cyber attacks every day
The UAE public sector faces around 50,000 cyber attacks every day. Speaking at G[P]Recently, at the RC Summit in Dubai, Mohammed Al Kuwaiti, head of cybersecurity of the UAE government,…