Category: CyberSecurityDive

Over 5K Ivanti VPNs vulnerable to critical bug under attack
08
Apr
2025

Over 5K Ivanti VPNs vulnerable to critical bug under attack

Dive Brief: The Shadowserver Foundation found 5,113 Ivanti VPN instances that are vulnerable to CVE-2025-22457, a critical stack-based buffer overflow…

Trump administration under scrutiny as it puts major round of CISA cuts on the table
07
Apr
2025

Trump administration under scrutiny as it puts major round of CISA cuts on the table

The Trump administration is facing renewed scrutiny from Congress and other officials following reports that massive job cuts are coming…

Cisco Smart Licensing Utility flaws under attack
07
Apr
2025

CISA adds Ivanti Connect Secure vulnerability to KEV catalog

Dive Brief: CISA on Friday added CVE-2025-22457, a critical stack-based buffer-overflow flaw that affects several Ivanti products, to the agency’s…

CISA, FBI warn of fast flux technique used to hide malicious servers
04
Apr
2025

CISA, FBI warn of fast flux technique used to hide malicious servers

The FBI, the Cybersecurity and Infrastructure Security Agency and a group of international partners on Thursday warned that cyber threat…

Head of NSA and US Cyber Command reportedly fired
04
Apr
2025

Head of NSA and US Cyber Command reportedly fired

Dive Brief: Multiple news outlets reported Thursday night that the Trump administration fired Gen. Timothy D. Haugh, director of the…

House members press Commerce Secretary Lutnick on DOGE-related job cuts at NIST
03
Apr
2025

House members press Commerce Secretary Lutnick on DOGE-related job cuts at NIST

Dive Brief: A group of 22 House members are raising alarm bells in a letter sent Wednesday to Commerce Secretary…

Cisco confirms cyberattacks on Smart Licensing Utility flaw
03
Apr
2025

Cisco confirms cyberattacks on Smart Licensing Utility flaw

Dive Brief: CISA earlier this week added CVE-2024-20439, a critical flaw in the Cisco Smart Licensing Utility, to its known…

Check Point Software confirms security incident but pushes back on threat actor claims
02
Apr
2025

Check Point Software confirms security incident but pushes back on threat actor claims

Check Point Software confirmed it was targeted in a recent hacking attempt after a threat actor offered to sell sensitive…

Mass login scans of PAN GlobalProtect portals surge
02
Apr
2025

Mass login scans of PAN GlobalProtect portals surge

A recent surge in login attempts targeting Palo Alto Networks’ PAN-OS GlobalProtect portals mainly located in the U.S. could be…

FTC chief flags data privacy concerns in 23andMe bankruptcy
02
Apr
2025

FTC chief flags data privacy concerns in 23andMe bankruptcy

Federal Trade Commission Chairman Andrew Ferguson on Monday said genetic testing company 23andMe, which recently initiated a bankruptcy proceeding, must honor…

Sam’s Club investigating attack claim linked to Clop ransomware
01
Apr
2025

Sam’s Club investigating attack claim linked to Clop ransomware

Sam’s Club confirmed it is investigating a possible cyberattack after the retailer was referenced on a leak site by the…

Critical vulnerability in CrushFTP file transfer software under attack
01
Apr
2025

Critical vulnerability in CrushFTP file transfer software under attack

A critical vulnerability in CrushFTP’s file transfer server software has come under attack less than a week after the flaw…