Security vendor will not say if attackers are already actively exploiting the flaw, as some reports have claimed. https://www.darkreading.com/attacks-breaches/ivanti-issues-fix-for-critical-vuln-in-its-sentry-gateway-technologySupport the show

The BlackCat/ALPHV ransomware group has started publishing data allegedly stolen from Japanese watchmaking giant Seiko. The post Ransomware Group Starts Leaking Data From Japanese Watchmaking Giant Seiko appeared first on SecurityWeek. https://www.securityweek.com/ransomware-group-starts-leaking-data-from-japanese-watchmaking-giant-seiko/Support the show

Software services provider Ivanti is warning of a new critical zero-day flaw impacting Ivanti Sentry (formerly MobileIron Sentry) that it said is being actively exploited in the wild, marking an escalation of its security woes.Tracked as CVE-2023-38035 (CVSS score: 9.8), the issue has been described as a case of authentication bypass impacting versions 9.18 and prior due to what it called an https://thehackernews.com/2023/08/ivanti-warns-of-critical-zero-day-flaw.htmlSupport the show

Understanding potential threats and regularly updating response plans are the best lines of defense in the new world of cyberattacks. https://www.darkreading.com/attacks-breaches/physical-impact-of-cyberattacks-on-citiesSupport the show

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security flaw in Adobe ColdFusion to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.The vulnerability, cataloged as CVE-2023-26359 (CVSS score: 9.8), relates to a deserialization flaw present in Adobe ColdFusion 2018 (Update 15 and earlier) and ColdFusion 2021 ( https://thehackernews.com/2023/08/critical-adobe-coldfusion-flaw-added-to.htmlSupport the show

Dubbed Carderbee, the group used legitimate software and Microsoft-signed malware to spread the Korplug/PlugX backdoor to various Asian targets. https://www.darkreading.com/attacks-breaches/chinese-apt-targets-hong-kong-in-supply-chain-attackSupport the show

How a Russian cybercrime group using Cuban Revolution references and iconography has emerged as one of the most profitable ransomware operations. https://www.darkreading.com/edge/cuba-ransomware-group-uses-every-trick-in-the-bookSupport the show

A new variant of an Apple macOS malware called XLoader has surfaced in the wild, masquerading its malicious features under the guise of an office productivity app called OfficeNote.The new version of XLoader is bundled inside a standard Apple disk image with the name OfficeNote.dmg, SentinelOne security researchers Dinesh Devadoss and Phil Stokes said in a Monday analysis. The application https://thehackernews.com/2023/08/new-variant-of-xloader-macos-malware.htmlSupport the show

A new State of SaaS Security Posture Management Report from SaaS cybersecurity provider AppOmni indicates that Cybersecurity, IT, and business leaders alike recognize SaaS cybersecurity as an increasingly important part of the cyber threat landscape. And at first glance, respondents appear generally optimistic about their SaaS cybersecurity.Over 600 IT, cybersecurity, and business leaders at https://thehackernews.com/2023/08/cisos-tout-saas-cybersecurity.htmlSupport the show

Threat actors are leveraging access to malware-infected Windows and macOS machines to deliver a proxy server application and use them as exit nodes to reroute proxy requests.According to AT&T Alien Labs, the unnamed company that offers the proxy service operates more than 400,000 proxy exit nodes, although its not immediately clear how many of them were co-opted by malware installed on https://thehackernews.com/2023/08/this-malware-turned-thousands-of-hacked.htmlSupport the show