Security Bulletin

BleepingComputer reports that the White Phoenix ransomware decryption tool has been made available on the web by CyberArk to ease the recovery from attacks involving ransomware strains with intermittent encryption, such as ALPHV/BlackCat, BianLian...

CISA released two Industrial Control Systems (ICS) advisories on February 1, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-032-01 Gessler GmbH WEB-MASTER ICSA...

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable Remotely/Low attack complexity Vendor: Gessler GmbH Equipment: WEB-MASTER Vulnerabilities: Use of Weak Credentials, Use of Weak Hash 2. RISK EVALUATION Successful exploitation of these...

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low attack complexity Vendor: AVEVA Equipment: AVEVA Edge products (formerly known as InduSoft Web Studio) Vulnerability: Uncontrolled Search Path Element 2. RISK EVALUATION Successful...

Moby and the Open Container Initiative (OCI) have released updates for multiple vulnerabilities ( CVE-2024-23651, CVE-2024-23652, CVE-2024-23653, CVE-2024-21626) affecting Docker-related components, including Moby BuildKit and OCI runc. A cyber...

SiliconAngle reports that artificial intelligence-powered security and compliance solutions provider Runecast Solutions is set to be purchased by unified observability and security provider Dynatrace as part of its efforts to strengthen its security...

This collection of FAQs (and links to other related articles) aims to de-mystify for new DNS administrators, what the root hints are and how they are used. What are the root hints? The root hints are a list of the servers that are authoritative for...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Technological advancements represent a shift in the mining industry, showcasing a commitment to environmental responsibility, enhanced safety measures and improved financial performance.

U.S. cloud infrastructure-as-a-service providers would be compelled to verify the identities of foreign users under a new proposed rule by the Department of Commerce's Bureau of Industry and Security in a bid to bolster defenses against foreign...

The Government and Accountability Office has disclosed that insights on the implementation of ransomware defenses among U.S. organizations in the energy, healthcare, manufacturing, and transportation industries have been lacking among six federal...

Organizations impacted by ransomware attacks increased by more than twofold between 2022 and 2023, as more threat actors resort to data extortion tactics, according to SecurityWeek.