For individuals

A SAML vulnerability in Ivanti appliances has led to persistent remote access and full control for opportunistic cyberattackers.

Black Basta ransomware claimed responsibility, but the company says its investigation is ongoing.

New data shows higher-than-expected cybersecurity growth in the Middle East, Turkey, and Africa region, thanks to AI and other factors.

CyberScoop reports that strengthening defenses against advanced persistent threat operations, bolstering the cybersecurity baseline of critical infrastructure organizations, and addressing risks associated with emerging technologies, have been noted by the Cybersecurity and Infrastructure Security Agency as key priorities for the Joint Cyber Defense Collaborative in 2024.

Telecommunications firms across the U.S. will be required to inform the Federal Communications Commission, the FBI, and the U.S. Secret Service regarding data breaches within seven days of identifying compromise under the finalized data breach reporting rule issued by the FCC, according to The Register.

The U.S.

Facebook Marketplace had a portion of its database claimed to be exposed by IntelBroker, Hackread reports.

BleepingComputer reports that almost 700 Ivanti servers have been compromised with the novel DSLog backdoor in attacks leveraging the server-side request forgery flaw affecting the SAML component of Ivanti Connect Secure, Policy Secure, and ZTA gateways, tracked as CVE-2024-21893.

Organizations have been warned by the Cybersecurity and Infrastructure Security Agency regarding ongoing attacks exploiting a cross-site scripting vulnerability impacting various versions of the Roundcube email server, tracked as CVE-2023-43770, reports BleepingComputer.

Third-party vendor IMS told BoA last fall that data from “deferred compensation plans" may have been compromised.