For providers

A patch for the max severity zero-day bug tracked as CVE-2023-20198 is coming soon, but the bug has already led to the compromise of tens of thousands of Cisco devices. And now, there's a new unpatched threat.

TechCrunch reports that Telegram has been discovered to continue exposing users' IP addresses to contacts during phone calls despite being touted as a secure and private messaging app.

Major U.S. healthcare solutions provider Henry Schein had its manufacturing and distribution divisions disrupted by a cyberattack on Oct. 14, SecurityWeek reports.

Japanese multinational electronics manufacturing firm Casio had data from its customers around the world compromised following unauthorized access to its ClassPad.net education web app's server, reports SiliconAngle.

KeePass is having its users targeted by a new malvertising campaign leveraging Google Ads to promote a fraudulent site for the open-source password manager, according to SiliconAngle.

Widely known security vulnerabilities have been increasingly targeted by ransomware strains based on the leaked toolkit of the LockBit ransomware operation, reports The Record, a news site by cybersecurity firm Recorded Future.

More stealthy attacks have been launched by the ALPHV/BlackCat ransomware operation with the use of the new Munchkin tool, which facilitates undetected encryptor deployment through virtual machines, BleepingComputer reports.

CyberScoop reports that the Ragnar Locker ransomware group, also known as Viking Spider, had its data leak site seized by the FBI and 15 other law enforcement agencies around the world as part of an international crackdown against ransomware infrastructure.

Though there is speculation regarding potential candidates, the Department of Defense will likely not nominate someone in the near term.

Vietnamese cybercrime groups are using multiple different MaaS infostealers and RATs to target the digital marketing sector.