Threat Actors Exploit Flaw in Cleo File Transfer Tools ‘En Masse’

Threat actors are exploiting a vulnerability (CVE-2024-50623) in Cleo file transfer tools.

🎓️ Vulnerable U | #093

Big Vulnerable U Announcement, US Telcos still currently owned by China, Scattered Spider arrests, Crypto Supply Chain attacks, and much more!

The Loneliness Tax: We're All Paying It

Zero Days to Zero Friends - What is the real threat?

Russian APT Secret Blizzard Piggybacks on Other Groups' Infrastructure

The FSB-affiliated group has taken over other APT teams' C2 servers and tools

U.S. Officials Tell Americans to Use Encrypted Apps as Scope of Cyberattack Grows

At least eight U.S. telecom firms and dozens of nations have been tied up in the unprecedented Salt Typhoon attack, according to new details from U.S. officials.

Solana's Web3.js Library Compromised in Supply Chain Attack

Two unauthorized library versions - 1.95.6 and 1.95.7 - have since been unpublished, and Solana app developers should upgrade to version 1.95.8

Attacks Target Cisco ASA Flaw From 2014

The flaw is a cross-site scripting vulnerability and a botnet has been seen exploiting it

FTC Prohibits Two Data Brokers From Selling Sensitive Location Data

The FTC is cracking down on data brokers Gravy Analytics Inc. and Mobilewalla, alleging they tracked and sold sensitive location data linked to places like medical or religious facilities, without consent.

Global Crackdown on Cybercrime Nets 5,500 Arrests

Zabbix Warns of Critical SQL Injection Flaw

The Zabbix vulnerability could allow attackers to escalate privileges and take over vulnerable Zabbix servers.

Inside ExxonMobil's Alleged Hack-for-Hire Campaign Targeting Climate Activists

Exxon Lobbyist Under Investigation for Hacking and Leaking Environmentalist Emails