Category: CyberSecurityDive

Emerging botnet exploits TP-Link router flaw posing risk to US organizations
12
Mar
2025

Emerging botnet exploits TP-Link router flaw posing risk to US organizations

A new IoT botnet that exploits a remote code execution (RCE) flaw in TP-Link Archer routers has been targeting U.S….

Juniper MX routers targeted by China-nexus threat group using custom backdoors
12
Mar
2025

Juniper MX routers targeted by China-nexus threat group using custom backdoors

Dive Brief: A China-nexus threat actor with apparent in-depth knowledge of Juniper MX devices has compromised the routers using custom…

CISA: 3 Ivanti endpoint vulnerabilities exploited in the wild
11
Mar
2025

CISA: 3 Ivanti endpoint vulnerabilities exploited in the wild

Three critical vulnerabilities in Ivanti Endpoint Manager (EPM) are currently under active exploitation in the wild, according to the Cybersecurity…

Trump nominates Plankey to lead CISA
11
Mar
2025

Trump nominates Plankey to lead CISA

President Trump has named Sean Plankey to become the director of the Cybersecurity and Infrastructure Security Agency, according to a…

Majority of ransomware claims involved compromise of perimeter security devices
11
Mar
2025

Majority of ransomware claims involved compromise of perimeter security devices

Dive Brief: About six of every 10 ransomware claims in 2024 involved the compromise of a perimeter security device such…

Former NSA cyber director warns drastic job cuts threaten national security
10
Mar
2025

Former NSA cyber director warns drastic job cuts threaten national security

A retired top cybersecurity official from the National Security Agency warned a key House panel that widespread cuts to federal…

Critical PHP vulnerability under widespread cyberattack
10
Mar
2025

Critical PHP vulnerability under widespread cyberattack

Dive Brief: CVE-2024-4577, a critical argument-injection vulnerability that affects PHP installations in Windows systems, has come under widespread exploitation in…

Eleven11bot estimates revised downward as researchers point to Mirai variant
07
Mar
2025

Eleven11bot estimates revised downward as researchers point to Mirai variant

Dive Brief: Security researchers have revised their estimates of the size of Eleven11bot, which has exploited IoT devices for DDoS…

Cobalt Strike takedown effort cuts cracked versions by 80%
07
Mar
2025

Cobalt Strike takedown effort cuts cracked versions by 80%

Dive Brief: Fortra’s Cobalt Strike has been a widely used weapon for a variety of cybercriminals and nation-state threat actors,…

37K+ VMware ESXi instances vulnerable to critical zero-day
06
Mar
2025

37K+ VMware ESXi instances vulnerable to critical zero-day

Dive Brief: Broadcom on Tuesday disclosed three zero-day vulnerabilities that affect multiple VMware products, including ESXi, Workstation and Fusion. The…

Cyberattacks targeting IT vendors intensify, causing bigger losses
06
Mar
2025

Cyberattacks targeting IT vendors intensify, causing bigger losses

Dive Brief: Cyberattacks targeting third-party vendors are causing more financial damage than ever before, cyber risk management firm Resilience said…

CrowdStrike shares fall as company forecasts lower-than-expected results
05
Mar
2025

CrowdStrike shares fall as company forecasts lower-than-expected results

Shares of CrowdStrike Holdings were down in morning trading after the cybersecurity vendor issued an earnings forecast that came in…