Tag: advisory
-
The Register: ‘Dead simple’ hijacking hole in Apache Tomcat ‘now actively exploited in the wild’
Source URL: https://www.theregister.com/2025/03/18/apache_tomcat_java_rce_flaw/ Source: The Register Title: ‘Dead simple’ hijacking hole in Apache Tomcat ‘now actively exploited in the wild’ Feedly Summary: One PUT request, one poisoned session file, and the server’s yours A trivial flaw in Apache Tomcat that allows remote code execution and access to sensitive files is said to be under attack…
-
Google Online Security Blog: Announcing OSV-Scanner V2: Vulnerability scanner and remediation tool for open source
Source URL: http://security.googleblog.com/2025/03/announcing-osv-scanner-v2-vulnerability.html Source: Google Online Security Blog Title: Announcing OSV-Scanner V2: Vulnerability scanner and remediation tool for open source Feedly Summary: AI Summary and Description: Yes Summary: The announcement details the release of OSV-Scanner V2.0.0, an open-source vulnerability scanning and remediation tool that integrates advanced features from OSV-SCALIBR. It enhances dependency extraction, provides comprehensive…
-
Microsoft Security Blog: How MSRC coordinates vulnerability research and disclosure while building community
Source URL: https://www.microsoft.com/en-us/security/blog/2025/03/13/how-msrc-coordinates-vulnerability-research-and-disclosure-while-building-community/ Source: Microsoft Security Blog Title: How MSRC coordinates vulnerability research and disclosure while building community Feedly Summary: Learn about the Microsoft Security Response Center, which investigates vulnerabilities and releases security updates to help protect customers from cyberthreats. The post How MSRC coordinates vulnerability research and disclosure while building community appeared first on…
-
The Register: Medusa ransomware affiliate tried triple extortion scam – up from the usual double demand
Source URL: https://www.theregister.com/2025/03/13/medusa_ransomware_infects_300_critical/ Source: The Register Title: Medusa ransomware affiliate tried triple extortion scam – up from the usual double demand Feedly Summary: Feds warn gang still rampant and now cracked 300+ victims around the world A crook who distributes the Medusa ransomware tried to make a victim cough up three payments instead of the…
-
The Register: CISA worker says 100-strong Red Team fired after DOGE cancelled contract
Source URL: https://www.theregister.com/2025/03/12/cisa_staff_layoffs/ Source: The Register Title: CISA worker says 100-strong Red Team fired after DOGE cancelled contract Feedly Summary: Election infosec advisory agency also shuttered A penetration tester who worked at the US govt’s CISA claims his 100-strong team was dismissed after Elon Musk’s Trump-blessed DOGE unit cancelled a contract – and that more…
-
The Register: Like whitebox servers, rent-a-crew crime ‘affiliates’ have commoditized ransomware
Source URL: https://www.theregister.com/2025/03/07/commoditization_ransomware/ Source: The Register Title: Like whitebox servers, rent-a-crew crime ‘affiliates’ have commoditized ransomware Feedly Summary: Which is why taking down chiefs and infra behind big name brand operations isn’t working Interview There’s a handful of cybercriminal gangs that Jason Baker, a ransomware negotiator with GuidePoint Security, regularly gets called in to respond…
-
Alerts: CISA Releases Three Industrial Control Systems Advisories
Source URL: https://www.cisa.gov/news-events/alerts/2025/03/06/cisa-releases-three-industrial-control-systems-advisories Source: Alerts Title: CISA Releases Three Industrial Control Systems Advisories Feedly Summary: CISA released three Industrial Control Systems (ICS) advisories on March 6, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-065-01 Hitachi Energy PCU400 ICSA-25-065-02 Hitachi Energy Relion 670/650/SAM600-IO ICSA-25-037-02 Schneider Electric EcoStruxure (Update…