AT&T Data Breach: Majority of Wireless Customers Affected by Hack
The extensive data breach affecting AT&T, exposing nearly all its wireless customers, has been linked to recent attacks targeting Snowflake customers.
New Ransomware Attacks Exploit Veeam Vulnerability
Security researchers warn that at least two ransomware groups have been exploiting a year-old vulnerability in Veeam Backup & Replication to extract data.
Millions Affected by Advance Auto Parts Breach Linked to Snowflake Incident
Advance Auto Parts, an American automotive aftermarket parts provider, is notifying over 2.3 million individuals that their personal information was compromised in the Snowflake incident earlier this year.
CISA Red Team found Critical Vulnerabilities in the Federal Civilian Agency
According to a report from the US government’s cybersecurity agency, a CISA red team exercise conducted in early 2023 has uncovered notable cybersecurity vulnerabilities within a federal civilian executive branch organization.
CrystalRay Expands Toolset, Hits 1,500 Targets Using SSH-Snake Tools
The threat actor known as ‘CrystalRay’, responsible for a February wave of attacks using the SSH-Snake penetration testing tool, has substantially escalated their operations, targeting thousands of additional victims with an expanded range of tools.
CISA & FBI Call for Action on OS Command Injection Vulnerabilities in Network Devices
CISA and the FBI have issued a joint alert regarding the exploitation of OS command injection vulnerabilities in network edge devices.
VMware Patches Critical SQL Injection Flaw in Aria Automation
Broadcom-owned VMware released patches for a high-risk SQL injection vulnerability in its Aria Automation product. The company warned that authenticated malicious users could exploit the flaw to manipulate databases.
Cytactic Secures $16M in Seed Funding for Cyber Crisis Management Technology
Israeli startup Cytactic has secured $16 million in seed-stage capital to develop a “cyber crisis readiness and management” platform.
Citrix Patches Critical Vulnerability in NetScaler Console
Cloud computing and virtualization software vendor Citrix has released patches to address multiple security vulnerabilities, including critical and high-severity issues in its flagship NetScaler product line.
Evolve Bank Data Breach Impacts 7.6 Million People
Evolve Bank & Trust has notified over 7.6 million individuals that their personal information was compromised in a recent LockBit ransomware attack.
Ransomware Group Releases Data Allegedly Taken from Florida Department of Health
The ransomware group RansomHub is reportedly leaking data that they claim was stolen from the Florida Department of Health.
Microsoft to Prohibit Android Phones for Staff in China
Microsoft intends to restrict employees in China from accessing its corporate network using Android-powered devices.