Tag: threat actor

Source URL: https://www.theregister.com/2025/01/13/severe_aviatrix_controller_vulnerability/ Source: The Register Title: Cryptojacking, backdoors abound as attackers abuse Aviatrix Controller bug Feedly Summary: This is what happens when you publish PoCs immediately “Several cloud deployments" are already compromised following the disclosure of the maximum-severity vulnerability in Aviatrix Controller, researchers say.… AI Summary and Description: Yes Summary: The text discusses a…

Alerts: CISA and US and International Partners Publish Guidance on Priority Considerations in Product Selection for OT Owners and Operators

Jan 13, 2025

—

by

Source URL: https://www.cisa.gov/news-events/alerts/2025/01/13/cisa-and-us-and-international-partners-publish-guidance-priority-considerations-product-selection-ot Source: Alerts Title: CISA and US and International Partners Publish Guidance on Priority Considerations in Product Selection for OT Owners and Operators Feedly Summary: Today, CISA—along with U.S. and international partners—released joint guidance Secure by Demand: Priority Considerations for Operational Technology Owners and Operators when Selecting Digital Products. As part of CISA’s Secure…

The Register: Nominet probes network intrusion linked to Ivanti zero-day exploit

Jan 13, 2025

—

by

Source URL: https://www.theregister.com/2025/01/13/nominet_ivanti_zero_day/ Source: The Register Title: Nominet probes network intrusion linked to Ivanti zero-day exploit Feedly Summary: Unauthorized activity detected, but no backdoors found UK domain registrar Nominet is investigating a potential intrusion into its network related to the latest Ivanti zero-day exploits.… AI Summary and Description: Yes Summary: Nominet, the UK domain registrar,…

Cloud Blog: Get ready for a unique, immersive security experience at Next ‘25

—

by

Source URL: https://cloud.google.com/blog/products/identity-security/unique-immersive-security-experience-coming-to-next-25/ Source: Cloud Blog Title: Get ready for a unique, immersive security experience at Next ‘25 Feedly Summary: Few things are more critical to IT operations than security. Security incidents, coordinated threat actors, and regulatory mandates are coupled with the imperative to effectively manage risk and the vital business task of rolling out…

The Register: Zero-day exploits plague Ivanti Connect Secure appliances for second year running

—

by

Source URL: https://www.theregister.com/2025/01/09/zeroday_exploits_ivanti/ Source: The Register Title: Zero-day exploits plague Ivanti Connect Secure appliances for second year running Feedly Summary: Factory resets and apply patches is the advice amid fortnight delay for other appliances The cybersecurity industry is urging those in charge of defending their orgs to take mitigation efforts “seriously" as Ivanti battles two…

The Register: Japanese Police claim China ran five-year cyberattack campaign

—

by

Source URL: https://www.theregister.com/2025/01/09/japan_mirrorface_china_attack/ Source: The Register Title: Japanese Police claim China ran five-year cyberattack campaign Feedly Summary: ‘MirrorFace’ group found ways to run malware in the Windows sandbox, which is worrying Japan’s National Police Agency and Center of Incident Readiness and Strategy for Cybersecurity have confirmed third party reports of attacks on local orgs by…

Cloud Blog: Ivanti Connect Secure VPN Targeted in New Zero-Day Exploitation

—

by

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day/ Source: Cloud Blog Title: Ivanti Connect Secure VPN Targeted in New Zero-Day Exploitation Feedly Summary: Written by: John Wolfram, Josh Murchie, Matt Lin, Daniel Ainsworth, Robert Wallace, Dimiter Andonov, Dhanesh Kizhakkinan, Jacob Thompson Note: This is a developing campaign under active analysis by Mandiant and Ivanti. We will continue to add more…

Alerts: Ivanti Releases Security Updates for Connect Secure, Policy Secure, and ZTA Gateways

Jan 8, 2025

—

by

Source URL: https://www.cisa.gov/news-events/alerts/2025/01/08/ivanti-releases-security-updates-connect-secure-policy-secure-and-zta-gateways Source: Alerts Title: Ivanti Releases Security Updates for Connect Secure, Policy Secure, and ZTA Gateways Feedly Summary: Ivanti released security updates to address vulnerabilities (CVE-2025-0282, CVE-2025-0283) in Ivanti Connect Secure, Policy Secure, and ZTA Gateways. A cyber threat actor could exploit CVE-2025-0282 to take control of an affected system.CISA has added CVE-2025-0282…

The Register: Turbulence at UN aviation agency as probe into potential data theft begins

Jan 7, 2025

—

by