LastPass Discloses Security Incident
Password management company LastPass has disclosed a breach in which intruders stole source code and proprietary data. In a blog post, LastPass CEO Karim Toubba writes that they “determined that…
Password management company LastPass has disclosed a breach in which intruders stole source code and proprietary data. In a blog post, LastPass CEO Karim Toubba writes that they “determined that…
Centre Hospitalier Sud Francilien (CHSF) was the target of a ransomware attack that began on Sunday, August 21. The incident forced the hospital, which is about 40 km (25 miles)…
According to researchers from Cyfirma, more than 80,000 Internet-facing IP cameras are vulnerable to command injection attacks. A patch has for the vulnerability has been available since September 2021. The…
CISA and MS-ISAC encourage users and administrators review Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite for more information and apply the recommended mitigations. More detail https://www.cisa.gov/uscert/ncas/alerts/aa22-228a
Cisco has released security updates to address vulnerabilities in Cisco Secure Web Appliance. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing…
A high severity vulnerability in Palo Alto Networks’ PAN-OS is being actively exploited to conduct reflected and amplified TCP denial-of-service attacks. The URL filtering policy misconfiguration flaw affects six versions…
Apple has released updates to address a vulnerability that could be exploited by a process injection attack to break multiple levels of Apple security. The issue was discovered by Thijs…
On Tuesday, August 2, VMware released an advisory that includes fixes for 10 vulnerabilities that affect its VMware Workspace ONE Access, Workspace ONE Access Connector, Identity Manager, Identity Manager Connector,…
The US securities and Exchange Commission (SEC) has fined US financial companies JP Morgan Chase & Co and Trade Station for “deficient customer identity programs.” In addition, the Consumer Financial…
Taiwan’s Ministry of Defense reported that its systems were targeted by a distributed denial-of-service (DDoS) attack earlier this week, shortly after US Speaker of the House Nancy Pelosi visited. Earlier…