2025-01-10 Post a Comment

Ivanti warns of new Connect Secure flaw used in zero-day attacks

By Lawrence Abrams Ivanti is warning that hackers exploited aÂ Connect Secure remote code execution vulnerability tracked as CVE-2025-0282Â in zero-day attacks to install malware on appliances. The company says it became aware of the vulnerabilities after the Ivanti Integrity Checker Tool (ICT) detected malicious activity on customers’ appliances. Ivanti launched an investigation and confirmed that threat actors were actively exploiting CVE-2025-0282 as a zero-day. CVE-2025-0282 is a critical (9.0) stack-based buffer […]

alt=Person interacting with a futuristic kitchen appliance touchscreen.

Cyber security

2025-01-10 Post a Comment

White House Plan to Secure Smart Devices Highlights Connected Economy Vulnerabilities

ByÂ PYMNTSÂ Â |Â Â January 9, 2025 Digital transformationÂ is a double-edged sword. From cloud computing and Internet of Things (IoT) to artificial intelligence-driven analytics and real-time payment systems, the connectivity ushered in by technological advances has unlocked opportunities for innovation and growth. The more connected the economy becomes, however, the moreÂ vulnerabilitiesÂ there are for fraudsters to exploit. ThisÂ makes cybersecurity increasingly crucial, as evidenced by the White House deploying aÂ Cyber Trust MarkÂ for connected consumer devices Tuesday […]

alt=Department of the Treasury building exterior, showcasing its classical architecture and prominent entrance.

Cyber security

2025-01-02 Post a Comment

US Treasury hacked: Are China and the US stepping up their cyberwar?

Department of the Treasury calls cyberattack a â€˜major incidentâ€™, accuses China-backed hackers. ByÂ Sarah Shamim The United States Department of the Treasury on MondayÂ blamedÂ China for breaching its network and gaining access to information that includes unclassified documents. Beijing has denied the allegation, calling it â€œgroundlessâ€. Keep reading list of 4 items list 1 of 4 US says â€˜Salt Typhoonâ€™ Chinese hacking group behind major metadata theft list 2 of 4 Did […]

alt=Weekly intelligence report titled "CPRI," summarizing key insights and data for strategic decision-making.

Cyber security

2024-12-30 Post a Comment

30th December â€“ Threat Intelligence Report

TOP ATTACKS AND BREACHES The Clop ransomware gangÂ exploitedÂ a zero-day vulnerability (CVE-2024-50623) in Cleoâ€™s Secure File Transfer products and is extorting 66 companies following alleged data theft. The attackers have given the victims 48 hours to initiate ransom negotiations before publicly disclosing their identities. This incident mirrors Clopâ€™s previous exploitation of zero-day flaws in platforms like Accellion FTA, GoAnywhere MFT, and MOVEit Transfer. Check Point Harmony Endpoint, Threat Emulation and IPS […]

alt= A visual representation of the top 10 cyber attacks from 2024, highlighting key incidents and their impacts.

Cyber security

2024-12-30 Post a Comment

Top 10 Cyber Attacks of 2024

By Guru Baran The year 2024 witnessed a surge in cyber-attacks, with incidents targeting critical infrastructure, healthcare, financial institutions, and even political campaigns. These attacks highlight the growing sophistication of threat actors and the vulnerabilities across industries. Below is a detailed list of the top 10 cyber-attacks of 2024 based on their scale, impact, and geopolitical significance. Key Takeaways from 2024 Cybersecurity Trends Healthcare Under Siege:Â Ransomware gangs increasingly targeted healthcare […]