Security Bulletin

Popular malware like QakBot and DarkGate rely on VBScript, which dates back to 1996 — but their days are numbered now that Microsoft is finally deprecating the Windows programming. language.

Patches have been released by Citrix for a critical flaw affecting NetScaler Application Delivery Controller and NetScaler Gateway instances, which could be exploited to facilitate the disclosure of sensitive data without any authentication...

Newly developed cybersecurity guidelines from the U.S. Department of Treasury, Cybersecurity and Infrastructure Security Agency, National Security Agency, and the FBI tackling open source software usage in industrial control systems and operational...

CyberScoop reports that two security vulnerabilities impacting the open source curl and libcurl programs were significantly less threatening than originally thought, with the more severe flaw that affects curl and its connection with the SOCKS5 proxy...

Attacks targeting a high-severity use-after-free Adobe Acrobat Reader flaw, tracked as CVE-2023-21608, have prompted the inclusion of the bug in the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalog, reports...

Caesars Entertainment disclosed that information from an undisclosed number of individuals, including 41,397 Maine residents, have been stolen following a ransomware attack by ALPHV/BlackCat affiliate Scattered Spider, according to The Register.

SiliconAngle reports that U.S. engineering firm and building materials producer Simpson Manufacturing had its IT infrastructure and apps disrupted as a result of a cyberattack.

Air Canada breach admitted by BianLian ransomware gang Air Canada had 210 GB of data claimed to be stolen by the BianLian ransomware operation during a recent data breach, BleepingComputer reports.

Data breaches have been reported by two-thirds of organizations with threat-based security measures over the past two years, while education continued to be one of the sectors most likely to be impacted by cyberattacks this year amid increasingly...

BleepingComputer reports that WordPress sites could be taken over by a new backdoor masquerading as a legitimate caching plugin.

The company has taken down its systems in an effort to determine the scope of the attack.