10 May Widely used modems in industrial IoT devices open to SMS attack Security flaws in Telit Cinterion cellular modems, widely used in sectors including industrial, healthcare, and telecommunications, could allow remote attackers to execute arbitrary code via SMS. […]
10 May Widely used Telit Cinterion modems open to SMS takeover attacks Security flaws in Telit Cinterion cellular modems, widely used in sectors including industrial, healthcare, and telecommunications, could allow remote attackers to execute arbitrary code via SMS. […]
09 May Poland says Russian military hackers target its govt networks Poland says a state-backed threat group linked to Russia’s military intelligence service (GRU) has been targeting Polish government institutions throughout the week. […]
09 May Monday.com removes “Share Update” feature abused for phishing attacks Project management platform Monday.com has removed its “Share Update” feature after threat actors abused it in phishing attacks. […]
09 May Citrix warns admins to manually mitigate PuTTY SSH client bug Citrix notified customers this week to manually mitigate a PuTTY SSH client vulnerability that could allow attackers to steal a XenCenter admin’s private SSH key. […]
09 May AT&T delays Microsoft 365 email delivery due to spam wave AT&T’s email servers are blocking connections from Microsoft 365 due to a “high volume” spam wave originating from Microsoft’s service. […]
09 May British Columbia investigating cyberattacks on government networks The Government of British Columbia is investigating multiple “cybersecurity incidents” that have impacted the Canadian province’s government networks. […]
09 May Dell warns of data breach, 49 million customers allegedly affected Dell is warning customers of a data breach after a threat actor claimed to have stolen information for approximately 49 million customers. […]
08 May Zscaler takes “test environment” offline after rumors of a breach Zscaler says that they discovered an exposed “test environment” that was taken offline for analysis after rumors circulated that a threat actor was selling access to the company’s systems. […]
08 May University System of Georgia: 800K exposed in 2023 MOVEit attack The University System of Georgia (USG) is sending data breach notifications to 800,000 individuals whose data was exposed in the 2023 Clop MOVEit attacks. […]