Clorox counts the cost of cyberattack Clorox has reported losses of $49 million following a cyberattack in mid-2023. 1 minute
CISA: Disconnect vulnerable Ivanti products TODAY CISA has ordered all FCEB agencies to disconnect all instances of Ivanti Connect Secure and Ivanti Policy Secure solution products. 2 minutes
AI likely to boost ransomware, warns government body The NCSC issued a report that warns about the growth and impact of malware, especially ransomware, due to the availability… 3 minutes
Patch now! Fortra GoAnywhere MFT vulnerability exploit available A new vulnerability in Fortra GoAnywhere MFT now has exploit code available that allows an attacker to create a new… 2 minutes
CISA urges urgent patching of two actively exploited Citrix NetScaler vulnerabilities CISA has added two Citrix NetScaler vulnerabilities to its vulnerability catalog, with a very short deadline to patch. 2 minutes
Ivanti vulnerabilities now actively exploited in massive numbers Two vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure Gateways are subject to massive exploitation despite an available workaround. 1 minute
Joomla! vulnerability is being actively exploited A vulnerability in the popular Joomla! CMS has been added to CISA's known exploited vulnerabilities catalog. 2 minutes
Act now! Ivanti vulnerabilities are being actively exploited Several international security agencies are echoing a warning by Ivanti about actively exploited vulnerabilities in its VPN solution. 2 minutes
Patch now! First patch Tuesday of 2024 is here Microsoft's patch Tuesday roundup looks like a relatively quiet one. Unless your organization uses FBX files. 2 minutes
Exposing the ransomware lie to “leave hospitals alone” Ransomware gangs are getting more ruthless to increase the pressure on their victims. Now, even swatting cancer patients seems to… 4 minutes
How ransomware operators try to stay under the radar We look at the three most common methods that ransomware groups use to avoid being detected. 3 minutes
How Outlook notification sounds can lead to zero-click exploits A researcher found two Microsoft vulnerabilities which could be combined to achieve zero-click remote code execution. 3 minutes
FBI issues advisory over Play ransomware The FBI, CSA, and ACSC have released a joint cybersecurity advisory about the Play ransomware group and their MO. 2 minutes