US federal agency hacked using old Telerik bug to steal data
Last year, a U.S. federal agency’s Microsoft Internet Information Services (IIS) web server was hacked by exploiting a critical .NET deserialization vulnerability in the Progress…
Category: Bleeping Computer
Healthcare provider ILS warns 4.2 million people of data breach
Independent Living Systems (ILS), a Miami-based healthcare administration and managed care solutions provider, suffered a data breach that exposed the personal information of 4,226,508 individuals.…
Microsoft March 2023 Patch Tuesday fixes 2 zero-days, 83 flaws
Tag CVE ID CVE Title Severity Azure CVE-2023-23408 Azure Apache Ambari Spoofing Vulnerability Important Client Server Run-time Subsystem (CSRSS) CVE-2023-23409 Client Server Run-Time Subsystem (CSRSS)…
Windows 11 KB5023706 and KB5023698 cumulative updates released
Microsoft has released the Windows 11 KB5023706 and KB5023698 cumulative updates for versions 22H2 and 21H2 to fix security vulnerabilities and bugs in the operating…
Windows 10 KB5023696 and KB5023697 updates released
It’s Microsoft’s March 2023 Patch Tuesday, and the new Windows 10 KB5023696 and KB5023697 cumulative updates are now available for versions 22H2, version 21H2, version…
Microsoft fixes Windows zero-day exploited in ransomware attacks
Microsoft has patched another zero-day bug used by attackers to circumvent the Windows SmartScreen cloud-based anti-malware service and deploy Magniber ransomware payloads without raising any…
Reddit is down in major outage blocking access to web, mobile apps
Reddit is investigating a major outage that is blocking users worldwide from accessing the social network’s website and mobile apps. Users are now seeing “Our CDN…
Rubrik confirms data theft in GoAnywhere zero-day attack
Cybersecurity company Rubrik has confirmed that its data was stolen using a zero-day vulnerability in the Fortra GoAnywhere secure file transfer platform. Rubrik is a…
SAP releases security updates fixing five critical vulnerabilities
Software vendor SAP has released security updates for 19 vulnerabilities, five rated as critical, meaning that administrators should apply them as soon as possible to…
Microsoft fixes Outlook zero-day used by Russian hackers since April 2022
Microsoft has patched an Outlook zero-day vulnerability (CVE-2023-23397) exploited by a hacking group linked to Russia’s military intelligence service GRU to target European organizations. The security…
FBI warns of spike in ‘pig butchering’ crypto investment schemes
Americans are increasingly targeted in ‘pig butchering’ cryptocurrency investment schemes, according to a public service announcement issued today by the Federal Bureau of Investigation (FBI).…
YoroTrooper cyberspies target CIS energy orgs, EU embassies
A new threat actor named ‘YoroTrooper’ has been running cyber-espionage campaigns since at least June 2022, targeting government and energy organizations in Commonwealth of Independent…