Apple Issues Emergency Security Update for Actively Exploited ...
Nov 20, 2024 · Apple has urged customers to apply emergency security updates, which fixes two actively exploited vulnerabilities on its devices. The fixes are included in the iOS 18.1.1 and iPadOS 18.1.1, Safari 18.1.1, visionOS 2.1.1 and macOS Sequoia 15.1.1 updates, available across a range of Apple devices, including iPhones, iPads, macOS and Apple Vision Pro.
Information Security and IT Security News - Infosecurity Magazine
Dec 19, 2024 · Keep up to date with the latest Information Security and IT Security News & Articles - Infosecurity Magazine
Fortinet Confirms Exploitation of Critical FortiManager Zero-Day
Oct 24, 2024 · Fortinet has confirmed that a critical zero-day vulnerability affecting its FortiManager network management solution is being exploited in the wild.. In an October 23 security advisory, the cybersecurity provider shared more information on CVE-2024-47575, a vulnerability allowing threat actors to use a compromised FortiManager device to execute arbitrary code or commands against other ...
MITRE Unveils Top 25 Most Critical Software Flaws
Nov 22, 2024 · Cross-site scripting has been identified as the most critical software flaw of the past year, according to a recent report from MITRE. The nonprofit’s latest Top 25 Most Dangerous Software Weaknesses ranking was published on November 20. It covers the most critical flaws listed in the Common Weakness Enumeration (CWEs) …
American Water Hit by Cyber-Attack, Billing Systems Disrupted
Oct 8, 2024 · American Water, the largest publicly regulated water and wastewater utility in the US, has disclosed on Monday that it had fallen victim to a cyber-attack, affecting certain internal systems.
Data Breach at MC2 Data Leaves 100 Million at Risk of Fraud
Sep 26, 2024 · A massive data leak exposing the personal information of over 100 million US citizens has been reportedly uncovered by security researchers. The breach, discovered by Cybernews and attributed to a misconfigured database at background check firm MC2 Data, allegedly left 2.2TB of sensitive data accessible online without password protection.
Russia's SVR Targets Zimbra, TeamCity Servers for Cyber Espionage
Oct 11, 2024 · Hackers at Russia’s Foreign Intelligence Service (SVR) have been spying on US, European and global entities for years to collect intelligence and enable future cyber operations, according to US and UK intelligence agencies.
Over Six Million Hit by Ransomware Breach at Infosys McCamish …
Jul 1, 2024 · A cyber-attack on outsourcer Infosys McCamish Systems last year impacted more than six million customers, according to a new filing with data protection authorities.
Microsoft Fixes Five Zero-Days in October Patch Tuesday
Oct 9, 2024 · Microsoft has patched two zero-day bugs under active exploitation and a further three that were publicly disclosed in this month’s Patch Tuesday update round.
US Authorities Issue RansomHub Ransomware Alert
Sep 2, 2024 · Authorities in the United States have issued a joint cybersecurity advisory covering a prolific ransomware group, RansomHub. The group is believed to have “encrypted and exfiltrated” data from at least 210 victims, through double extortion techniques.