Cybersecurity and Infrastructure Security Agency (CISA)

Eight critical vulnerabilities in ICS devices allow hackers to take control over access to buildings and lock or unlock doors at will

On: June 10, 2022

Tagged: access control, Carrier LenelS2, Common Vulnerability Scoring System (CVSS), critical infrastructure, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Denial of Service (DDoS), Hacking, Industrial Control System (ICS), Information Security, Internet of Things (IoT), operational technology (OT), remote code execution (RCE), security flaws, technology, vulnerability

Experts from Trellix Threat Labs have shared research on multiple vulnerabilities in an industrial control system (ICS) used to grant physical access to protected facilities, and integrated into building automationRead More →

Vulnerabilities discovered in software used in medical devices for clinical diagnostics and patients’ DNA sequencing would alter the way doctors look for genetic conditions

On: June 3, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyber Crime, Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Hacking, Illumia, incidents, Information Security, man-in-the-middle (MITM), remote code execution (RCE), security flaws, technology, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a security alert regarding a set of vulnerabilities that would allow malicious hackers to take control of Illumia genetic analysis devices.Read More →

Critical vulnerabilities in VMware Workspace ONE Access, Identity Manager, vRealize Automation, Cloud Foundation, and vRealize Suite Lifecycle Manager enable data theft

On: May 20, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), exploits, Hacking, incidents, Proof of Concept (PoC), technology, VMware, vulnerability

In a recent alert, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) recommends VMware users update or even delete their deployments due to the detection of critical vulnerabilities, exploited justRead More →

Sysrv botnet is more powerful than ever: New exploits to take control of Linux and Windows devices

On: May 18, 2022

In: Virus

Tagged: botnet, Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Hacking, Information Security, Linux, malware, security flaws, Sysrv botnet, technology, Windows

In its most recent release, the operators of the Sysrv botnet included new exploits to use new vulnerabilities, posing a serious threat to Windows and Linux systems. Identified as Sysrv-K,Read More →

Cybersecurity agencies of the Five Eyes alliance publish list of the 15 most dangerous vulnerabilities. Patch them no matter what

On: April 28, 2022

In: Vulnerabilities

Tagged: Australia, Canada, Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Five Eyes, Hacking, Information Security, Log4Shell, New Zealand, ProxyLogon, ProxyShell, security flaws, United Kingdom, United States, vulnerability

In a joint statement, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI) and the cybersecurity agencies of Canada, the United Kingdom, New Zealand and AustraliaRead More →

450 security researchers working through the Department of Homeland Security’s “Hack the DHS” bug bounty program identified over 122 vulnerabilities

On: April 25, 2022

In: Vulnerabilities

Tagged: Bug Bounty program, Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Department of Homeland Security (DHS), Hack the DHS, hackers, Hacking, Information Security, Log4j, Log4Shell, security flaws, technology, vulnerability

A recent report by the U.S. Department of Homeland Security (DHS) notes that, over the past year, the “Hack the DHS” vulnerability bounty program involved more than 450 cybersecurity professionals,Read More →

TokenAIS, CryptAIS, and Esilet trojanized applications with TraderTraitor malware are being used to hack cryptocurrency developers and users

On: April 20, 2022

In: Vulnerabilities

Tagged: blockchain, cryptocurrency, Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), hackers, Hacking, Lazarus Group, malware, North Korea, phishing, US Treasury Department

In a joint report, the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the US Treasury Department are warning blockchain/cryptocurrency users and organizations about anRead More →

Critical vulnerabilities affecting Citrix StoreFront, SD WAN, XenMobile Server, and Gateway Plug-in

On: April 13, 2022

In: Vulnerabilities

Tagged: Citrix, Citrix SD-WAN, Common Vulnerability Scoring System (CVSS), Cross-site scripting (XSS), Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Hacking, Information Security, security flaws, technology, vulnerability

Citrix announced the release of security patches for multiple vulnerabilities present in some of its products, including a severe issue in SD-WAN. Tracked as CVE-2022-27505, this flaw was described asRead More →

Russians are jamming satellites to disrupt aircraft traffic and landing

On: March 18, 2022

In: Cyber Security

Tagged: Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), European Union, Federal Bureau of Investigation (FBI), hackers, Hacking, incidents, Information Security, Russia, satellites, security flaws, technology, Ukraine

The European Union Aviation Safety Agency (EASA) issued an emergency alert after some flights in the region had to be diverted or changed destinations following continued interference detected on navigationRead More →