Biztonsági szemle

BleepingComputer reports that internet-exposed Apache RocketMQ servers vulnerable to the critical remote code execution flaws, tracked as CVE-2023-33246 and CVE-2023-37582 the latter of which stemmed from the incomplete fix of the former were...

Attacks with an updated iteration of the Bandook remote access trojan have been launched against Windows machines, reports The Hacker News.

Adversarial machine learning terms, types and mitigations outlined in the National Institute of Standards and Technology's 98-page paper.

Attackers can exploit the issue to access all data in Cacti database; and, it enables RCE when chained with a previous vulnerability.

An old state-aligned threat actor is back on the radar, thanks to recent EMEA espionage campaigns against a minority ethnic group.

While loanDepot did not come out specifically, security pros believe the mortgage lender experienced a ransomware attack.

Threat actors leave medical centers with the difficult choice of paying the ransom or witnessing patients suffer the consequences.

In addition to posting messages criticizing the group, the cyberattackers disrupted flight information and baggage handling systems.

Security pros predict threat groups will continue to change their tactics as global law enforcement ramps up collaborating in the fight against ransomware other forms of cybercrime in the coming year.

Nearly a dozen criminals linked to the once prolific underground marketplace for compromised server access and stolen PII have been jailed, while others are awaiting sentencing.

Critical infrastructure organizations need to recognize that the technology and cybersecurity landscapes have changed.

Iranian citizens' personal details were left visible online due to a misconfigured storage system.