Security Bulletin

Infiltration of Malama's systems between May 4 and May 7 has enabled the exfiltration of individuals' medical treatment data, Social Security numbers, financial account numbers with CVV numbers and expiry dates, bank names, passport numbers, routing...

Detection of suspicious network activity has prompted UMC, which manages 30 clinics in West Texas and Eastern New Mexico, to immediately disconnect its systems and launch an investigation, which attributed the compromise to ransomware.

Malicious websites created with Sniper Dz have been given custom links and obscured by the legitimate proxymesh[.]com server, which has been configured to facilitate automated phishing content loading without direct communications in a bid to prevent...

Companies deploying ZTNA find that its more efficient – and cost effective – to own the underlying infrastructure.

Improvements in cybersecurity and basics like patching aren't keeping pace with the manufacturing sector's rapid growth.

With effective monitoring into endpoint activity, threats to the network can be detected and neutralized before causing extensive damage.

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability These types of vulnerabilities are frequent attack...

The addition of Network Perception will bring enhanced network visibility, compliance, and segmentation analytics to the Dragos OT cybersecurity platform.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Prioritizing security as a critical element to an organization's effectiveness and success will reduce the risk of incidents, while benefiting the whole team and the organization's reputation.

The bug gives attackers a way to run arbitrary code on affected servers and take control of them.