Recycling Giant Tomra Takes Systems Offline Following Cyberattack
Norwegian recycling giant Tomra has taken some of its systems offline after falling victim to what it describes as “an extensive cyberattack”. A multinational company,…
Category: SecurityWeek
Two Jira Plugin Vulnerabilities in Attacker Crosshairs
Attackers are apparently trying to exploit two path traversal vulnerabilities in the ‘Stagil navigation for Jira – Menus & Themes’ plugin, the SANS Internet Storm…
Recently Patched GE Cimplicity Vulnerabilities Reminiscent of Russian ICS Attacks
Over a dozen vulnerabilities patched recently by GE in its Cimplicity product are reminiscent of industrial control system (ICS) attacks conducted by a notorious Russian…
Chrome 115 Patches 20 Vulnerabilities
Google on Tuesday announced the release of Chrome 115 to the stable channel, with patches for 20 vulnerabilities, including 11 reported by external researchers. Of…
Oracle Releases 508 New Security Patches With July 2023 CPU
Oracle on Tuesday announced the release of 508 new security patches as part of the July 2023 CPU, including more than 75 patches that resolve…
Exploitation of New Citrix Zero-Day Likely to Increase, Organizations Warned
Citrix on Tuesday announced patches for three vulnerabilities, including an actively exploited zero-day that allows remote code execution. The zero-day, tracked as CVE-2023-3519 and rated…
US Gov Mercenary Spyware Clampdown Hits Cytrox, Intellexa
The U.S. government’s clampdown on commercial spyware and mercenary hacking companies ramped up this week with the addition of Cytrox and Intellexa to an ‘entity…
NSA, CISA Issue Guidance on 5G Network Slicing Security
The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) on Monday published guidance on hardening 5G standalone network slices against potential…
Nigerian Man Sentenced to 8 Years in US Prison for $8 Million BEC Scheme
A Nigerian national who had been living in the United Arab Emirates has been sentenced to more than eight years in a US prison for…
Black Hat Hacker Exposes Real Identity After Infecting Own Computer With Malware
A threat actor infected their own computer with an information stealer, which has allowed Israeli threat intelligence company Hudson Rock to uncover their real identity.…
WordPress Sites Hacked via Critical Vulnerability in WooCommerce Payments Plugin
Threat actors have started hacking WordPress websites by exploiting a critical vulnerability in the WooCommerce Payments plugin. A fully integrated payment solution developed by Automattic,…
White House Unveils Cybersecurity Labeling Program for Smart Devices
The Biden-Harris administration today announced a new cyber initiative to label smart devices that are considered safe to use and less vulnerable to attacks. As…