Security Bulletin

With the help of grant funding, agencies and organizations can better defend themselves and their constituents.

Operational technology and internet-of-things cybersecurity provider Nozomi Networks and Google's Mandiant have forged an expanded threat intelligence collaboration aimed at bolstering industry and enterprise cybersecurity, reports SiliconAngle.

FedScoop reports that a new artificial intelligence roadmap integrating insights obtained from the bipartisan Senate AI working group's series of AI forums tackling the technology's risk and impact on some industries, among others, was noted by...

University System of Georgia, which manages the state's higher education institutions, disclosed that 800,000 individuals across the state had their information compromised in late May as a result of the widespread MOVEit file transfer system hack...

Boeing has confirmed being the unnamed multinational aeronautical and defense corporation demanded by the LockBit ransomware operation to pay a $200 million ransom as mentioned in an unsealed indictment against LockBit administrator Dmitry Yuryevich...

Kansas' City of Wichita was claimed to have been disrupted by the LockBit ransomware operation, which threatened to expose all files exfiltrated from the city's network by May 15 should city officials refuse ransom payment, BleepingComputer reports.

More sophisticated anti-analysis methods have been integrated into the updated version of the Hijack Loader malware loader, also known as IDAT Loader, to better circumvent security systems as it deploys various malicious payloads, The Hacker News...

Zscaler removed an internet-exposed test environment without any customer data following rumors that it was the company claimed to have been compromised by IntelBroker, according to BleepingComputer.

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Delta Electronics Equipment: InfraSuite Device Master Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation...

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: FactoryTalk Historian SE Vulnerabilities: Missing Release of Resource after Effective Lifetime, Improper Check or...

CISA released four Industrial Control Systems (ICS) advisories on May 09, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-130-01 Rockwell Automation FactoryTalk...

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: alpitronic Equipment: Hypercharger EV charger Vulnerability: Use of Default Credentials 2. RISK EVALUATION Successful exploitation of this...