China-linked APT UNC3886 exploits VMware zero-day since 2021
19
Jan
2024

China-linked APT UNC3886 exploits VMware zero-day since 2021

China-linked APT UNC3886 exploits VMware zero-day since 2021 Pierluigi Paganini January 19, 2024 China-linked group UNC3886 has been exploiting vCenter…

CISA
19
Jan
2024

CISA emergency directive: Mitigate Ivanti zero-days immediately

CISA issued this year’s first emergency directive ordering Federal Civilian Executive Branch (FCEB) agencies to immediately mitigate two Ivanti Connect…

The Devastating PixieFail Flaws in UEFI – Is Your Device at Risk?
19
Jan
2024

The Devastating PixieFail Flaws in UEFI – Is Your Device at Risk?

The recent discovery of “PixieFail,” a set of nine vulnerabilities in Tianocore’s EDK II IPv6 network stack, has raised significant…

Plexal launches Cyber Runway 3.0 accelerator programme
19
Jan
2024

MPs flag similarities between HMRC’s treatment of Loan Charge contractors and Post Office scandal

The treatment of tens of thousands of IT contractors who are being pursued by HM Revenue & Customs (HMRC) for…

Location
19
Jan
2024

FTC bans one more data broker from selling your location info

The U.S. Federal Trade Commission (FTC) continues to target data brokers, this time in a settlement with InMarket Media, which…

Iran's Mint Sandstorm Hits Universities with Hamas-Israel Phishing Scam
19
Jan
2024

Iran’s Mint Sandstorm Hits Universities with Hamas-Israel Phishing Scam

Microsoft has warned of a sophisticated phishing scam, accompanied by the use of a custom backdoor called MediaPI, orchestrated by…

Cloud Security Is Best Achieved With The Right Preparation
19
Jan
2024

Cloud Security Is Best Achieved With The Right Preparation

Cloud migration is one of the hottest industry topics right now. Many organizations are rapidly making the transformation to the…

Ivanti EPMM and MobileIron Core vulnerability is actively exploited, CISA confirms (CVE-2023-35082)
19
Jan
2024

Ivanti EPMM and MobileIron Core vulnerability is actively exploited, CISA confirms (CVE-2023-35082)

A previously patched critical vulnerability (CVE-2023-35082) affecting Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core is being actively exploited, the…

ICO prompts confusion over police cloud legality
19
Jan
2024

ICO prompts confusion over police cloud legality

The Information Commissioner Office (ICO) has sown confusion over the legality of police forces using US-based cloud providers to process…

Ivanti fixed a critical EPM flaw that can result in RCE
19
Jan
2024

US CISA warns of actively exploited Ivanti EPMM flaw CVE-2023-35082

U.S. CISA warns of actively exploited Ivanti EPMM flaw CVE-2023-35082 Pierluigi Paganini January 19, 2024 U.S. Cybersecurity and Infrastructure Security…

VMware
19
Jan
2024

Chinese hackers exploit VMware bug as zero-day for two years

A Chinese hacking group has been exploiting a critical vCenter Server vulnerability (CVE-2023-34048) as a zero-day since at least late…

Hackers Abuse TeamViewer to Launch Ransomware Attacks
19
Jan
2024

Hackers Abuse TeamViewer to Launch Ransomware Attacks

Hackers exploit TeamViewer because it gives remote access to systems and allows threat actors to control them. This can be…