23 Jun The Week in Ransomware – June 23rd 2023 – The Reddit Files It was a relatively quiet week regarding ransomware news, with the BlackCat ransomware gang extorting Reddit and the ongoing MOVEit Transfer data breaches being the main focus. […]
23 Jun University of Manchester confirms data theft in recent cyberattack The University of Manchester finally confirmed that attackers behind a cyberattack disclosed in early June had stolen data belonging to alumni and current students. […]
23 Jun CISA orders agencies to patch iPhone bugs abused in spyware attacks Today, CISA ordered federal agencies to patch recently patched security vulnerabilities exploited as zero-days to deploy Triangulation spyware on iPhones via iMessage zero-click exploits. […]
23 Jun FBI seizes BreachForums after arresting its owner Pompompurin in March U.S. law enforcement today seized the clear web domain of the notorious BreachForums (aka Breached) hacking forum three months after apprehending its owner Conor Fitzpatrick (aka Pompompurin), under cybercrime charges. […]
23 Jun MOVEIt breach impacts GenWorth, CalPERS as data for 3.2 million exposed PBI Research Services (PBI) has suffered a data breach with three clients disclosing that the data for 4.75 million people was stolen in the recent MOVEit Transfer data-theft attacks. […]
23 Jun Fortinet fixes critical FortiNAC remote command execution flaw Cybersecurity solutions company Fortinet has updated its zero-trust access solution FortiNAC to address a critical-severity vulnerability that attackers could leverage to execute code and commands. […]
22 Jun Microsoft 365 users report Outlook, Teams won’t start or freezes Network and IT admins have been dealing with ongoing Microsoft 365 issues this week, reporting that some end users cannot use Microsoft Outlook or other Microsoft 365 apps. […]
22 Jun Microsoft Teams bug allows malware delivery from external accounts Security researchers have found a simple way to deliver malware to an organization with Microsoft Teams, despite restrictions in the application for files from external sources. […]
22 Jun NSA shares tips on blocking BlackLotus UEFI malware attacks The U.S. National Security Agency (NSA) released today guidance on how to defend against BlackLotus UEFI bootkit malware attacks. […]
22 Jun CISA orders govt agencies to patch bugs exploited by Russian hackers On Thursday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added six more security flaws to its known exploited vulnerabilities (KEV) list. […]