Hackers Exploiting Critical Fortinet EMS Vulnerability to Deploy Remote Access Tools

20/12/2024 0 Comments 0 tags

A now-patched critical security flaw impacting Fortinet FortiClient EMS is being exploited by malicious actors as part of a cyber campaign that installed remote desktop software such as AnyDesk and

CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities List

20/12/2024 0 Comments 0 tags

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products to the Known Exploited

Juniper Warns of Mirai Botnet Targeting SSR Devices with Default Passwords

19/12/2024 0 Comments 0 tags

Juniper Networks is warning that Session Smart Router (SSR) products with default passwords are being targeted as part of a malicious campaign that deploys the Mirai botnet malware. The company

Thousands Download Malicious npm Libraries Impersonating Legitimate Tools

19/12/2024 0 Comments 0 tags

Threat actors have been observed uploading malicious typosquats of legitimate npm packages such as typescript-eslint and @types/node that have racked up thousands of downloads on the package registry. The counterfeit

Fortinet Warns of Critical FortiWLM Flaw That Could Lead to Admin Access Exploits

19/12/2024 0 Comments 0 tags

Fortinet has issued an advisory for a now-patched critical security flaw impacting Wireless LAN Manager (FortiWLM) that could lead to disclosure of sensitive information. The vulnerability, tracked as CVE-2023-34990, carries

UAC-0125 Abuses Cloudflare Workers to Distribute Malware Disguised as Army+ App

19/12/2024 0 Comments 0 tags

The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed that a threat actor it tracks as UAC-0125 is leveraging Cloudflare Workers service to trick military personnel in the country

Dutch DPA Fines Netflix €4.75 Million for GDPR Violations Over Data Transparency

19/12/2024 0 Comments 0 tags

The Dutch Data Protection Authority (DPA) on Wednesday fined video on-demand streaming service Netflix €4.75 million ($4.93 million) for not giving consumers enough information about how it used their data

CISA Mandates Cloud Security for Federal Agencies by 2025 Under Binding Directive 25-01

19/12/2024 0 Comments 0 tags

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued Binding Operational Directive (BOD) 25-01, ordering federal civilian agencies to secure their cloud environments and abide by Secure Cloud Business

INTERPOL Pushes for “Romance Baiting” to Replace “Pig Butchering” in Scam Discourse

18/12/2024 0 Comments 0 tags

INTERPOL is calling for a linguistic shift that aims to put to an end to the term “pig butchering,” instead advocating for the use of “romance baiting” to refer to

BeyondTrust Issues Urgent Patch for Critical Vulnerability in PRA and RS Products

18/12/2024 0 Comments 0 tags

BeyondTrust has disclosed details of a critical security flaw in Privileged Remote Access (PRA) and Remote Support (RS) products that could potentially lead to the execution of arbitrary commands. Privileged