Category: Government IT
-
Today’s Topics: Ivanti Releases More Patches After Zero-Day Chain Compromises VPN Appliances FBI Ties Record $6.3 Billion Binance Heist to North Korean Hackers How can Netizen help? Ivanti Releases More Patches After Zero-Day Chain Compromises VPN Appliances Ivanti has released another round of security updates for its Connect Secure VPN appliances after two additional zero-day…
-
Today’s Topics: PHP2Shell Was Under Attack Before the Patches Were Public A Forgotten Credential Turned LiteLLM’s Release Pipeline Into an Attack Path How can Netizen help? PHP2Shell Was Under Attack Before the Patches Were Public Two critical vulnerabilities in the PHP runtime have raised concerns about how quickly attackers can begin targeting widely deployed software…
-
Today’s Topics: North Korean IT Worker Scheme Exposes Security Risks Across More Than 70 US Companies MITRE ATT&CK v20 Expands Coverage of AI Threats and Industrial Cyberattacks How can Netizen help? North Korean IT Worker Scheme Exposes Security Risks Across More Than 70 US Companies The US Department of Justice announced a coordinated crackdown on…
-
Today’s Topics: Fake Claude Installers Exploit Google Ads and Bing Redirects to Deliver ClickFix Attacks Ransomware Attack on Japanese Cloud Provider Disrupts Services for Nearly 500 Organizations How can Netizen help? Fake Claude Installers Exploit Google Ads and Bing Redirects to Deliver ClickFix Attacks A newly identified malware campaign is exploiting trusted search engine infrastructure…
-
Today’s Topics: Google Pauses Open-Source Bug Bounty Submissions Amid AI Report Flood Pentagon Personnel Breach Exposes Data on Nearly Three Million People How can Netizen help? Google Pauses Open-Source Bug Bounty Submissions Amid AI Report Flood Google has spent years encouraging security researchers to automate more of the work involved in finding software flaws. Now,…
-
Today’s Topics: Google’s €403 Million Fine Shows the Cost of Losing Control of Location Data CMMC Phase II Is Paused, but Defense Contractors Still Have Work to Do How can Netizen help? Google’s €403 Million Fine Shows the Cost of Losing Control of Location Data On September 21, Ireland’s Data Protection Commission fined Google €403…
-
The FBI is investigating claims that the ShinyHunters cybercrime group compromised FBIJobs.gov and obtained a large collection of personnel and applicant information, including records that appear to identify employees working in sensitive intelligence, surveillance, and counterintelligence roles. ShinyHunters says it entered through a previously unknown Oracle PeopleSoft vulnerability and ultimately stole between two and three…
-
Today’s Topics: ScreenConnect Flaw Turns a Trusted Remote Session Into a File Execution Path Cisco ISE Zero-Day Turns an Identity Control Point Into Root Access How can Netizen help? ScreenConnect Flaw Turns a Trusted Remote Session Into a File Execution Path Remote support software already occupies an unusually trusted position inside an enterprise. A technician…
-
Today’s Topics: The Twitch Extension That Sent 31,000 OAuth Tokens Through Its Proxy Network When the Firewall Manager Becomes the Foothold How can Netizen help? The Twitch Extension That Sent 31,000 OAuth Tokens Through Its Proxy Network A browser extension promising better Twitch playback quietly created a much larger security problem. Nearly 31,000 Chrome and…
-
Today’s Topics: PaperCut Zero-Days Turn Trusted Print Servers Into a Pre-Auth RCE Path The ATF Breach Shows Why an Isolated System Can Still Hold High-Consequence Risk How can Netizen help? PaperCut Zero-Days Turn Trusted Print Servers Into a Pre-Auth RCE Path PaperCut entered emergency-response mode in late August after confirming active exploitation against PaperCut NG…
