CISA Says Palo Alto’s CVE-2024-5910 Under Active Exploit
A missing authentication flaw in Palo Alto Networks’ Expedition tool now jeopardizes firewall configurations across sectors, with attackers actively exploiting this vulnerability in the wild.…
Category: DarkReading
Critical Command Injection Bug Hits Cisco’s URWB Devices
Cisco’s Unified Industrial Wireless Software for Ultra-Reliable Wireless Backhaul (URWB) Access Points contain a severe vulnerability that potentially allows attackers to execute commands with root…
Germany Moves To Protect Security Researchers
The Federal Ministry of Justice in Germany has released a draft law aimed at providing legal protection for security researchers who identify and responsibly report…
Microlise Data Breach Hits UK Prisoner Transport
A recent cyberattack on the UK-based telematics provider, Microlise, has left British prison vans temporarily without essential tracking systems and panic alarms. While this disruption…
Indian Online Stock Trading Scam Cost Two Victims US$31,000
Deepfakes are on the minds of many in India this week after a pair of Bengaluru residents lost 26 lakh Rupees (about US$31,000) in an…
Did Russian Influence Change The U.S. Election Outcome?
Russian efforts to influence the U.S. presidential election accelerated in the final days of the campaign, culminating in bomb threats in Democratic-leaning areas of key…
Google Fixes Two Android Zero-Days Used In Targeted Attacks
In its November security update, Google has patched two critical Android zero-days actively exploited in targeted attacks, along with 49 additional vulnerabilities. Google flagged these…
India Tightens Cybersecurity In Public Banks
To enhance India’s financial stability and cyber resilience, M. Nagaraju, Secretary of the Department of Financial Services (DFS) India, convened a meeting with the Managing…
Update Synology To Prevent Hacks
The Indian Computer Emergency Response Team (CERT-In) has issued an advisory alert on a critical vulnerability in certain Synology products, which could allow attackers to…
A New Focus On Third-Party Risk
On October 17th, the EU’s Network and Information Security Directive 2, NIS2 for short, will be enforced across all member states to enhance cyber resilience.…
Global Crackdown Leads To Seizure Of 22,000 Malicious IPs
Interpol has coordinated a major international takedown of cybercrime infrastructure that was in operation around the globe. Dubbed “Operation Synergia II,” the action led to…
Nigeria Arrests 130 In Cybercrime Crackdown
A police crackdown in Abuja unveiled a web of cybercrime operations involving foreign nationals and Nigerian collaborators, exposing a serious threat to Nigeria’s national security.…