Biztonsági szemle

In-the-wild exploit activity from dozens of cyberattacker networks is ramping up for the security vulnerability in Confluence, tracked as CVE-2023-22518.

The Associated Press reports that its news website was impacted by an outage believed to be caused by a distributed denial-of-service attack.

Microsoft has momentarily removed support for the SketchUp file format used for 3D model data storage after the patches it issued to address 117 security flaws impacting Microsoft 365 applications were circumvented, according to SecurityWeek.

Atlassian has urged immediate patching of a critical vulnerability impacting all Confluence Data Center and Confluence Server versions, tracked as CVE-2023-22518, following the emergence of a public exploit that could be exploited to facilitate data...

Major U.S. biotechnology and genetic testing firm 23andMe has been demanded by Connecticut Attorney General William Tong to provide details regarding a data breach that resulted in the exposure of data from millions of users, including those of...

Major U.S. healthcare solutions provider Henry Schein was claimed to be compromised by the ALPHV/BlackCat ransomware operation in an attack last month, which resulted in the theft of 35 TB of files, BleepingComputer reports.

Major U.S. mortgage and loan firm Mr. Cooper has disclosed that ongoing outages have stemmed from a cyberattack on Oct. 31, which it is already looking to resolve, according to TechCrunch.

Cyberattack hits Ace Hardware BleepingComputer reports that most IT systems of Ace Hardware have been disrupted by a cyberattack over the weekend, affecting many key operating systems of the U.S. multinational hardware store retailers' cooperative...

Okta had 4,961 current and former employees' data, including names, health insurance plan numbers, and Social Security numbers, compromised following a breach at its third-party vendor Rightway Healthcare, reports The Register.

Two Israeli organizations have been targeted by Iranian state-backed threat operation MuddyWater, also known as Mango Sandstorm and Static Kitten, in a new spear-phishing campaign that distributed N-able's Advanced Monitoring Agent remote...

Cyberattackers downed a quarter of the hardware giant's entire IT apparatus. Now, before the company can recover, they're going after individual branches.

1Password, BeyondTrust, and Cloudflare were among five customers directly targeted with stolen Okta session tokens, the company's CSO says.