The U.S. Environmental Protection Agency (EPA) has sent an enforcement warning about the serious cyber threats and holes in community drinking water systems. The National Security Council and the Cybersecurity …
Ivanti Endpoint Manager SQL Injection Flaw Let Attackers Execute Arbitrary Code
Multiple vulnerabilities involving SQL injection have been identified in Ivanti Endpoint Manager. These vulnerabilities could potentially enable malicious actors to carry out various unauthorized actions, including initiating Denial of Service …
Veeam Enterprise Backup Manager Flaw Allows Unauthorized Access
Veeam Backup And Replication is backup software for creating secure backups that enable clean recovery and data resilience. The software replicates VM backups to a secondary location, which will quickly …
Rockwell Automation Warns Admin to Disconnect Devices From Internet
Rockwell Automation has sent an urgent message to all of its customers because of rising geopolitical issues and hostile cyber activity worldwide. The company is asking that any devices currently …
Critical VMware Vulnerabilities Let Attackers Execute Code & Trigger DOS
VMware, a leading virtualization and cloud computing software provider, has issued patches for several critical and important vulnerabilities affecting its ESXi, Workstation, Cloud Foundation, and Fusion products. If exploited, these …
Critical Unauthenticated RCE Vulnerability in Fortinet FortiSIEM: PoC Published
A proof-of-concept (PoC) exploit has been released for a critical unauthenticated, remote code execution vulnerability in Fortinet FortiSIEM, tracked as CVE-2023-34992. The vulnerability, which has a CVSS score of 10.0, …
New Hijack Loader Attack Windows with Enhanced Anti-Evasion Capabilities
Security researchers from ANY.RUN have identified a new version of the Hijack Loader malware, which now boasts updated anti-evasion techniques. This development marks a significant evolution in the malware’s ability …
Why Your Wi-Fi Router Doubles as an Apple AirTag
Image: Shutterstock. Apple and the satellite-based broadband service Starlink each recently took steps to address new research into the potential security and privacy implications of how their services geo-locate devices. …
Memcyco Report Reveals Only 6% Of Brands Can Protect Their Customers From Digital Impersonation Fraud
Memcyco Inc., a provider of digital trust technology designed to protect companies and their customers from digital impersonation fraud, released its inaugural 2024 State of Website Impersonation Scams report. Notably, …
Zoom Announces Post-Quantum End-to-End Encryption for Meetings
Zoom, the popular video conferencing platform, has announced that it will be adding extra security to its meetings. This change is meant to protect users’ private information from potential threats …