SysAid Zero-Day Vulnerability Exploited by Ransomware Group
Organizations using SysAid IT service management software have been warned about a zero-day vulnerability that has been exploited by affiliates of a notorious ransomware operation. …
Category: SecurityWeek
CISA Says SLP Vulnerability Allowing Amplified DoS Attacks Exploited in the Wild
The US cybersecurity agency CISA on Wednesday issued a warning on threat actors exploiting a Service Location Protocol (SLP) vulnerability that allows for denial-of-service (DoS)…
Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes
Threat hunters at Mandiant are shining the spotlight on a pair of previously undocumented operational technology (OT) attacks last October by Russia’s “Sandworm” hackers that…
Protecto Joins Cadre of Startups in AI Data Protection Space
Protecto, a Silicon Valley startup working on technology to secure corporate AI deployments, is joining a fast-growing list of early stage companies in the artificial…
GitHub Enhances Security Capabilities With AI
Microsoft-owned code hosting platform GitHub today announced the public preview of three AI-powered features in GitHub Advanced Security. Available for GitHub Enterprise Cloud and Enterprise…
DHS Launches New Critical Infrastructure Security and Resilience Campaign
The DHS and two of its agencies, CISA and FEMA, on Tuesday announced the launch of a new campaign whose goal is to help critical…
Offense Intended: How Adversarial Emulation Went From State Secret To Board Bullet Point
Offensive security as a category has blown past its tipping point, to where it’s in danger of becoming one of those overused terms that means…
Sumo Logic Urges Users to Change Credentials Due to Security Breach
Cloud monitoring, log management, and SIEM tools provider Sumo Logic is urging customers to change credentials following the discovery of a security breach. The company…
FBI Highlights Emerging Initial Access Methods Used by Ransomware Groups
The FBI has released a fresh warning on ransomware operators compromising third-party vendors and services to abuse them for initial access to victim environments. Threat…
Marina Bay Sands Discloses Data Breach Impacting 665k Customers
Singapore’s Marina Bay Sands luxury resort revealed on Tuesday that 665,000 of its customers are impacted by a recent data breach. The incident affects Marina…
Dropper Service Bypassing Android Security Restrictions to Install Malware
A recently identified dropper-as-a-service (DaaS) uses a novel technique to bypass Android’s security restrictions for payload delivery, online fraud detection firm ThreatFabric reports. Dubbed ‘SecuriDropper’,…
Data Brokers Expose Sensitive US Military Member Info to Foreign Threat Actors: Study
Foreign threat actors can easily obtain sensitive information on US military members from data brokers, according to a new Duke University study whose results were…