Category: SecurityWeek

Ivanti zero-day CVE-2023-35078 exploited
23
Aug
2023

Exploitation of Ivanti Sentry Zero-Day Confirmed

Ivanti has confirmed that a recently discovered vulnerability affecting its Sentry mobile gateway has been exploited in attacks. The existence…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
22
Aug
2023

Ransomware Group Starts Leaking Data From Japanese Watchmaking Giant Seiko

A known ransomware group on Monday started publishing data allegedly stolen from the systems of Japanese watchmaking giant Seiko. Seiko…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
22
Aug
2023

US Military Targeted in Recent HiatusRAT Attack

A recent HiatusRAT campaign has been targeting a US military procurement system for reconnaissance, cybersecurity firm Lumen reports. Initially observed…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
22
Aug
2023

TP-Link Smart Bulb Vulnerabilities Expose Households to Hacker Attacks

Four vulnerabilities identified by academic researchers from Italy and the UK in the TP-Link Tapo L530E smart bulb and its…

Hacker Conversations: Interview Cris Thomas, (Space Rogue) from Lopht Heavy Industries
22
Aug
2023

Hacker Conversations: Cris Thomas (AKA Space Rogue) From Lopht Heavy Industries

Researchers are hackers. In the hat color terminology, there are Blackhat, Whitehat and various shades of Greyhat hackers. Today, the…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
22
Aug
2023

Australian Energy Software Firm Energy One Hit by Cyberattack

Energy One, an Australian company that provides software products and services to the energy sector, has been hit by a…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
22
Aug
2023

Grip Security Lands $41 Million Series B Financing

Israeli cloud data security startup Grip Security has banked $41 million in new financing from a group of investors led…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
22
Aug
2023

New ‘Carderbee’ APT Targeted Chinese Security Software in Supply Chain Attack

A newly discovered advanced persistent threat (APT) actor has been observed deploying the PlugX backdoor via a supply chain attack,…

Adobe vulnerability exploited
22
Aug
2023

CISA Warns of Another Exploited Adobe ColdFusion Vulnerability

The US Cybersecurity and Infrastructure Security Agency (CISA) is warning organizations that an Adobe ColdFusion vulnerability patched earlier this year…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
22
Aug
2023

Cerby Raises $17 Million for Access Management Platform for Nonstandard Applications

Access management startup Cerby today announced that it has raised $17 million in a Series A funding round that brings…

Ivanti vulnerability patch
21
Aug
2023

Ivanti Ships Urgent Patch for API Authentication Bypass Vulnerability

Ivanti’s problems with security defects in its enterprise-facing products are starting to pile up. The IT software company on Monday…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
21
Aug
2023

Researchers Uncover Real Identity of CypherRAT and CraxsRAT Malware Developer

Cybersecurity company Cyfirma claims to have uncovered the real identity of the developer behind the CypherRAT and CraxsRAT remote access…