Security Bulletin

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Fortra gave an update on two years of efforts to reduce abuse of its redteaming tool.

Just like with any regular computer, researchers figured out how to crack into, force restart, and upload malware to an aftermarket in-vehicle infotainment system.

The likely India-based threat group is also targeting logistics companies in a continued expansion of its activities.

The program underwent a series of changes in the past year, including richer maximum rewards in a variety of bug categories.

The incidents occurred in 2020 and 2021, and exposed the data of 165,000 people in New York state.

The South American-based advanced persistent threat group is using an exploit with a "high infection rate," according to research from Check Point.

Security pros say exploitation of critical PHP flaw could lead to system compromise and ransomware attacks.

Clandestine kill switch was designed to lock out other users if the developer's account in the company's Windows Active Directory was ever disabled.

In the battle against two-minute micro-attacks that can knock out critical communication services, the difference between success and failure can literally come down to seconds.