Oracle Warns of New EBS Vulnerability That Allows Remote Access
Oracle over the weekend issued another security alert about a vulnerability in its E-Business Suite (EBS), the software family that...
Data Privacy
Salesforce Refuses to Pay Ransom to Data-Stealing Hackers
Salesforce reportedly is refusing to pay a ransom demanded by hackers who claim to have stolen more than 1 billion...
#RediShell: Redis/Valkey Get ‘Perfect 10’ Critical RCE Vuln
CVSS 10.0 vulnerability in ubiquitous cloud storage layer. PATCH NOW.Redis (Remote Dictionary Server) and its open source fork Valkey share a...
Cl0p Ransomware Group Exploited in a Zero-Day in Oracle EBS Attacks
The Cl0p ransomware group that over the last week has been sending extortion emails to executives with companies it’s stolen...
Scattered Lapsus$ Hunters Extorts Victims, Demands Salesforce Negotiate
The so-called retirement of the Scattered Lapsus$ Hunters extortion group didn’t last long.The threat group – a combination of the...
The Political Weaponization of Cybersecurity
Ideally, cybersecurity — and cybersecurity policy — should be somewhat apolitical. It should be based on principles of authentication, access...
From Deception to Defense: Understanding and Combating Phishing
Phishing is a cyberattack where attackers attempt to trick victims into an activity that is against their best interests and...
Asahi Hack Update: Beer-Free Day #5 Dawns in Japanese Ransomware Crisis
金のうんこ！ Breaking: Big beer brewer belatedly believes bitten by ransomware—and likely a data breach. The post Asahi Hack Update: Beer-Free...
North Korea Remote Worker Scam Goes Global, Expands Target Industries
A report by Okta researchers says the notorious North Korea IT worker scams, which have focused on U.S. tech and...
Hacker Stole Sensitive Data From FEMA, Border Patrol: Reports
An assessment by DHS found that hackers were able to access FEMA servers by exploiting the CitrixBleed 2 vulnerability and...
Google Mandiant: Emails Sent to Corporate Execs Claiming Oracle Data Theft
Corporate executives at multiple organizations are receiving malicious emails from threat actors saying they are associated with the Cl0p ransomware...
CISA Ends Funding for MS-ISAC Program for State and Local Governments
CISA ended a 21-year agreement with CIS to run MS-ISAC, a cyberthreat resource and information-sharing program that local and state...
200,000 More SIM Cards Found Linked to Secret Telecom Network in NYC
Federal investigators have found 200,000 more SIM cards at a site in New Jersey that were part of a sprawling...
Critical CISA Cybersecurity Law is Hours Away from Expiring
Many in the United States over the past several weeks have turned a worried eye to Washington D.C., with the...
‘Aggressive’ Akira Ransomware Blitz Clubs SonicWall 2FA to DEATH
Yet another security problem plaguing SonicWall customers.The Akira gang have found a way to override the multifactor authentication in SonicWall SSL...
