Author: nlqip
The TellYouThePass ransomware gang has been exploiting the recently patched CVE-2024-4577 remote code execution vulnerability in PHP to deliver webshells and execute the encryptor payload on target systems. Attacks started on June 8, less than 48 hours after the release of security updates by PHP’s maintainers, and relied on publicly available exploit code. TellYouThePass ransomware is…
Read MoreApply the stable channel update provided by Adobe to vulnerable systems immediately after appropriate testing. (M1051: Update Software)o Safeguard 7.1 : Establish and Maintain a Vulnerability Management Process: Establish and maintain a documented vulnerability management process for enterprise assets. Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard.o…
Read More
Image: Midjourney A never-before-seen Windows malware named ‘Warmcookie’ is distributed through fake job offer phishing campaigns to breach corporate networks. According to Elastic Security Labs, which discovered the new threat, Warmcookie is capable of extensive machine fingerprinting, screenshot capturing, and the deployment of additional payloads. The campaign is currently underway, and the threat actors create new…
Read More
Image: Midjourney The Dutch Military Intelligence and Security Service (MIVD) warned today that the impact of a Chinese cyber-espionage campaign unveiled earlier this year is “much larger than previously known.” As the MIVD disclosed in February in a joint report with the General Intelligence and Security Service (AIVD), Chinese hackers exploited a critical FortiOS/FortiProxy remote…
Read More
With the new “Build with Confluent” program, the company looks to help systems integrators develop use-case solutions around the Confluent data streaming platform and market those solutions to potential customers. Expanding on its recent initiatives to work with the channel, Confluent today launched the Build with Confluent program through which the company is providing technical…
Read More
The City of Cleveland, Ohio, is currently dealing with a cyberattack that has forced it to take citizen-facing services offline, including the public offices and facilities at Erieview and the City Hall. With a metropolitan area population of over 2 million people, Cleveland is a vital healthcare, manufacturing, finance, logistics, education, and technological hub and the…
Read More
The standalone version of Securonix’s trailblazing UEBA (user and entity behavior analytics) tool will be a major boost to partner sales opportunities, according to Channel Chief Mark Stevens. Next-generation SIEM unicorn Securonix unveiled a refreshed partner program Tuesday while also debuting a standalone version of its pioneering tool for thwarting insider threats. The revamped channel…
Read More
Downtime cost large enterprises an average of $200 million annually, cutting 9% from yearly profits, according to a study commissioned by Splunk. And while ransomware accounts for a relatively small proportion of that total, enterprises should really be budgeting more for it. For the study, titled “The Hidden Costs of Downtime,” Oxford Economics quizzed executives…
Read More
Today is Microsoft’s June 2024 Patch Tuesday, which includes security updates for 51 flaws, eighteen remote code execution flaws, and one publicly disclosed zero-day vulnerability. This Patch Tuesday fixed 18 RCE flaws but only one critical vulnerability, a remote code execution vulnerability in Microsoft Message Queuing (MSMQ). The number of bugs in each vulnerability category is…
Read More
‘This new round puts us in a unique position to push the frontier of AI and bring state-of-the-art technology to everyone’s hands,’ says Mistral AI CEO Arthur Mensch. Microsoft-backed startup Mistral AI has raised $643 million in a new funding round, which increased the company’s valuation to $6 billion. Arthur Mensch, CEO and co-founder of…
Read More