Virtual Event Today: CISO Forum 2023 – Register to Join
SecurityWeek’s 2023 CISO Forum Virtual Summit is taking place June 13-14 as a fully immersive online experience. Designed for senior level cybersecurity leaders to discuss,…
Latest Cybersecurity News — Page 6230
View all →
Experts released PoC exploit for MOVEit Transfer CVE-2023-34362Security Affairs
Security firm Horizon3 released proof-of-concept (PoC) exploit code for the remote code execution (RCE) flaw CVE-2023-34362 in the MOVEit Transfer MFT. MOVEit Transfer is a…
RDP honeypot targeted 3.5 million times in brute-force attacks
Remote desktop connections are so powerful a magnet for hackers that an exposed connection can average more than 37,000 times every day from various IP…
Russians charged in Mt. Gox Bitcoin heist and BTC-e money laundering
Mt. Gox, once the largest Bitcoin exchange in the world, collapsed in 2014 after the theft was discovered. The United States Department of Justice (DoJ)…
CosmicEnergy ICS Malware Poses No Immediate Threat, but Should Not Be Ignored
The recently discovered CosmicEnergy malware, which is designed to target industrial control systems (ICS), does not pose an immediate threat to operational technology (OT), but…
UK regulator Ofcom hacked with a MOVEit zero-daySecurity Affairs
UK communications regulator Ofcom suffered a data breach after a Clop ransomware attack exploiting the MOVEit file transfer zero-day. UK’s communications regulator Ofcom disclosed a…
Massive phishing campaign uses 6,000 sites to impersonate 100 brands
A widespread brand impersonation campaign targeting over a hundred popular apparel, footwear, and clothing brands has been underway since June 2022, tricking people into entering…
Patch Tuesday: Critical Flaws in Adobe Commerce Software
Silicon Valley software giant Adobe on Tuesday shipped patches for critical flaws in multiple products, including a dozen issues that expose Adobe Commerce users to…
Fortinet urges to patch the critical RCE flaw CVE-2023-27997 in Fortigate firewallsSecurity Affairs
Fortinet addressed a new critical flaw, tracked as CVE-2023-27997, in FortiOS and FortiProxy that is likely exploited in a limited number of attacks. Fortinet has finally published…
Pirated Windows 10 ISOs install clipper malware via EFI partitions
Hackers are distributing Windows 10 using torrents that hide cryptocurrency hijackers in the EFI (Extensible Firmware Interface) partition to evade detection. The EFI partition is a small…
Chinese Cyberspies Caught Exploiting VMware ESXi Zero-Day
A Chinese cyberespionage group tracked as UNC3886 has been observed exploiting a VMware ESXi zero-day vulnerability to escalate privileges on guest virtual machines, Mandiant warns.…
A DB containing data of +8.9 million Zacks users was leaked onlineSecurity Affairs
A database containing the personal information of more than 8.9 million Zacks Investment Research users was leaked on a cybercrime forum. A database containing personal…