Cisco Smart Licensing Utility flaws under attack
Dive Brief: Johannes Ullrich of the SANS Internet Storm Center reported exploitation attempts this week against two critical Cisco vulnerabilities that were initially disclosed in…
Category: CyberSecurityDive
GitHub Action compromise linked to previously undisclosed attack
Dive Brief: The GitHub Action supply chain compromise that threatened the security of more than 23,000 repositories appears to be linked to a previously undisclosed…
11 nation-state groups exploit unpatched Microsoft zero-day
At least 11 state-sponsored threat groups since 2017 have been actively exploiting a Microsoft zero-day flaw allowing for abuse of Windows shortcut files to steal…
Google acquisition of Wiz driven by enterprise embrace of multicloud
After previously being left at the altar, Alphabet Inc. reached a deal Tuesday through its Google business to buy Wiz for $32 billion in an…
CISA urges fired probationary workers to respond after federal judge grants order
Dive Brief: The Cybersecurity and Infrastructure Security Agency is reaching out to probationary workers who were terminated over the past two months following a court…
RansomHub using FakeUpdates scheme to attack government sector
RansomHub cyber threat actors have found a new way to deploy their ransomware, and they’re using it to target U.S. government entities. According to Trend Micro,…
AI project failure rates are on the rise: report
Dive Brief: More enterprises reported AI project failures this year compared to 2024, according to analysis from S&P Global Market Intelligence. The findings are based…
Supply chain attack against GitHub Action triggers massive exposure of secrets
Security researchers are warning of a supply chain attack against tj-actions/changed-files GitHub Action, which is used in more than 23,000 repositories. A malicious commit was…
Black Basta uses brute-forcing tool to attack edge devices
Dive Brief: Black Basta’s private chat logs were leaked last month, revealing the strategies, tactics and targeted vulnerabilities that the notorious ransomware-as-a-service gang used over…
How Kettering University protects us all
If you’ve driven a car, used cloud services or even turned on a smart faucet, you’ve likely benefited from the cybersecurity expertise of someone in…
Tech giants seek data standards amid AI push
Dive Brief: Five technology vendors united behind adoption of cross-industry data safety standards Thursday. Cisco, IBM, Intel, Microsoft and Red Hat jointly sponsored the launch…
SuperBlack ransomware used to exploit Fortinet vulnerabilities
Dive Brief: A newly discovered ransomware strain, tracked as SuperBlack, has been used in a series of attacks targeting critical vulnerabilities in Fortinet since late…