For individuals

Vulnerable Apace ActiveMQ instances impacted by the maximum severity bug, tracked as CVE-2023-46604, could be exploited to achieve arbitrary code execution from memory through a new proof-of-concept exploit, The Hacker News reports.

Denmark had operations at 22 of its energy firms significantly disrupted in ongoing coordinated intrusions that involved the exploitation of a vulnerability in Zyxel firewalls since May, which is the country's largest cyberattack yet, according to The Record, a news site by cybersecurity firm Recorded Future.

Samsung has disclosed that its UK online store was impacted by a cyberattack, which compromised data from purchasing customers between July 1, 2019, and June 30, 2020, reports BleepingComputer.

ALPHV/BlackCat criminals alleged digital lending firm MeridianLink failed to report a breach the hacking group executed.

Plume claimed to be subjected to data breach Hackread reports that U.S. smart Wi-Fi service provider Plume was claimed to have had more than 20GB of files from its Wi-Fi database stolen by threat actors introducing themselves as MonkeyInject.

BleepingComputer reports that U.S. financial software firm MeridianLink has been snitched on by the ALPHV/BlackCat ransomware operation in a complaint filed with the U.S. Securities and Exchange Commission, alleging the company's failure to disclose a purported cyberattack within the SEC's four-day breach notification limit.

U.S. organizations have been warned by the FBI and the Cybersecurity and Infrastructure Security Agency regarding attacks by the Rhysida ransomware operation, which have already impacted manufacturing, healthcare, government, education, and information technology entities, according to BleepingComputer.

Academics in Germany figured out how to reverse time in AMD virtualization environments, then reap the spoils.

While Intel released a fix for the Reptar flaw — and that’s good — security pros say teams must keep the BIOS, OS, and drivers updated as a matter of course.

Vehicles are required to meet basic safety standards. Having similar requirements for software would give consumers greater control over their privacy and security.