Category: SecurityWeek

Patch Tuesday: Critical Flaws in Adobe Commerce Software
25
Sep
2023

Stealthy APT Gelsemium Seen Targeting Southeast Asian Government

A stealthy advanced persistent threat (APT) actor known as Gelsemium has been observed targeting a government entity in Southeast Asia…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
25
Sep
2023

Nigerian Pleads Guilty in US to Million-Dollar BEC Scheme Role

A Nigerian national residing in South Africa last week pleaded guilty in court in the United States to his role…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
25
Sep
2023

900 US Schools Impacted by MOVEit Hack at National Student Clearinghouse

The National Student Clearinghouse, an educational nonprofit that provides reporting, verification, and research services to colleges and universities in North…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
25
Sep
2023

City of Dallas Details Ransomware Attack Impact, Costs 

The City of Dallas has announced that an $8.5 million budget has been approved to support the restoration of its…

Pegasus spyware delivered to iOS and Android devices
25
Sep
2023

Predator Spyware Delivered to iOS, Android Devices via Zero-Days, MitM Attacks

The Predator spyware has been delivered to iPhones and Android devices using iOS and Chrome zero-day vulnerabilities and man-in-the-middle (MitM)…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
25
Sep
2023

In-the-Wild Exploitation Expected for Critical TeamCity Flaw Allowing Server Takeover

A critical vulnerability in the TeamCity CI/CD server could be exploited remotely, without authentication, to execute arbitrary code and gain…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
24
Sep
2023

Researchers Discover Attempt to Infect Leading Egyptian Opposition Politician With Predator Spyware

A leading Egyptian opposition politician was targeted with spyware after announcing a presidential bid, security researchers reported Friday. They said…

Cybersecurity news roundup
22
Sep
2023

In Other News: New Analysis of Snowden Files, Yubico Goes Public, Election Hacking

SecurityWeek is publishing a weekly cybersecurity roundup that provides a concise compilation of noteworthy stories that might have slipped under…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
22
Sep
2023

Faster Patching Pace Validates CISA’s KEV Catalog Initiative

The Known Exploited Vulnerabilities (KEV) Catalog maintained by the US cybersecurity agency CISA has led to significant improvements in federal…

China
22
Sep
2023

China’s Offensive Cyber Operations in Africa Support Soft Power Efforts

Chinese state-sponsored threat groups have targeted telecommunications, financial and government organizations in Africa in support of Beijing’s soft power agenda…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
22
Sep
2023

Air Canada Says Employee Information Accessed in Cyberattack

Air Canada, the largest airline in the country, this week announced that the personal information of some employees was accessed…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
22
Sep
2023

BIND Updates Patch Two High-Severity DoS Vulnerabilities

The Internet Systems Consortium (ISC) has released security updates to address two remotely exploitable denial-of-service (DoS) vulnerabilities in the DNS…