For providers

While cyberattacks drop slightly during the week of the Islamic pilgrimage, organizations in Saudi Arabia and other countries with large Muslim populations see attacks on the rise.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Our honeypots have detected the first probes for CVE-2024-4577. This vulnerability was originally discovered by Orange Tsai on Friday (June 7th) [1][2]. Watchtwr labs followed up with a detailed blog post and a proof of concept exploit [3].

Since at least February, a threat actor has been attempting to extort victims by stealing or wiping data in their GitHub repositories.

The feature will no longer be on by default and will come with additional security measures.

Our collection of the most relevant reporting and industry perspectives for those guiding cybersecurity strategies and focused on SecOps. Also included: Proactive playbooks, a US-Kenya partnership, and the trouble with shadow engineering.

Administrators are being advised to update their systems following the disclosure of a critical vulnerability in PHP

If current cybersecurity workers only fill 85% of the need in the US, why are so many people still looking for positions? The data from the private-public NIST partnership CyberSeek offers some insight.

Increased collaborative efforts within the industry and increased security vendor partnerships are designed to help organizations better manage the continuous stream of vulnerabilities.

The latest platform update from SolarWinds includes patches for three vulnerabilities, including two high-severity bugs.