Russian Espionage Group Exploited Zimbra Zero-Day to Harvest Email and Recovery Codes
A state-linked Russian group spent months silently reading Western inboxes by exploiting an unknown vulnerability…
Tag: regulation
EU and US Banks Found Leaking Customer Data via Advertising Trackers
Tracking pixels embedded in banking websites have been quietly transmitting customer data to advertising platforms,…
OpenSSL Memory Exhaustion Flaw ‘HollowByte’ Patched Quietly, With No CVE or Advisory
An 11-byte TLS payload can lock up to 131 KB of server memory indefinitely on…
Russian Intelligence Exploiting Internet-Connected Cameras to Monitor NATO Logistics and Ukrainian Forces
Dutch intelligence warns that at least one Russian agency is systematically compromising network cameras across…
CISA Mandates Federal Patch for Critical Adobe ColdFusion Vulnerability
US agencies have until Friday to remediate a maximum-severity ColdFusion flaw that is being actively…
NCSC Distils Pen Tester Wisdom Into Practical Hardening Advice
The UK's National Cyber Security Centre has published guidance drawn from penetration testing experience to…
CISA Orders Federal Agencies to Patch Actively Exploited Cisco Unified Communications Flaw by Sunday
A vulnerability in Cisco Unified Communications Manager is under active exploitation, prompting CISA to impose…
DHS chief says president has met with potential CISA nominee; agency plans to hire 600
What security leaders need to know about the affected systems.
CISA Flags Active Exploitation of Critical Splunk Enterprise Vulnerability
US federal agencies have until Sunday to patch a critical Splunk Enterprise flaw that attackers…
CISA Mandates Federal Patch for Maximum-Severity Joomla JCE Plugin Flaw
Active exploitation of a critical vulnerability in the widely used JCE plugin has prompted CISA…