For individuals

The Dragos Community Defense Program provides small water, gas, and electric utilities with access to the Dragos Platform, training resources, and threat intelligence.

Summary Summary Microsoft recently remediated one Denial of Service and two Escalation of Privilege vulnerabilities affecting third party components of Azure HDInsight. Access to the target cluster as an authenticated user was a prerequisite for exploitation in all three cases. A successful privilege escalation could result in the attacker assuming the Cluster Administrator role.

The recent attacks on water utilities in the U.S. bring to light how our local facilities are no match against well-funded nation-state threat actors bent on doing us harm.

Four RCE vulnerabilities in Confluence, Jira, and other platforms, allow instance takeover and environment infestation.

Igor Tsyganskiy inherits the high-profile CISO spot in Redmond, while his predecessor, Bret Arsenault, is named chief security adviser.

Adobe patched CVE-2023-26360 in March amid active exploit activity targeting the flaw.

Malvertising schemes have been used by the Storm-0216 threat operation, also known as UNC2198 and Twisted Spider, to deploy the Danabot malware to achieve initial systems access before proceeding with the distribution of Cactus ransomware since last month, reports The Record, a news site by cybersecurity firm Recorded Future.

SecurityWeek reports that more than 700 organizations deploying artificial intelligence tools, including Microsoft, Google, and VMware, could have had their accounts compromised due to the 1,681 valid Hugging Face tokens enabling large language model integration and Hugging Face repository management, which have been exposed on Hugging Face and GiHub.