A vulnerability has been discovered in WatchGuard Fireware OS, which could allow for a remote unauthenticated attacker to execute arbitrary code. WatchGuard Fireware is the proprietary operating system that powers WatchGuard's Firebox appliances.
A vulnerability has been discovered in Cisco AsyncOS, used by Cisco Secure Email Gateway and Cisco Secure Email and Web Manager, which could allow for remote code execution,. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands
Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user.
The Cybersecurity and Infrastructure Security Agency (CISA) has released updated Cross-Sector Cybersecurity Performance Goals (CPG 2.0) with measurable actions for critical infrastructure owners and operators to achieve a foundational level of cybersecurity.
There is a new Xfinity/Comcast phishing campaign in which an email states that access to the user’s mailbox and stored data may be permanently discontinued if the user does not update their email. They employ actions taken by some providers to delete inactive accounts.
In these campaigns, threat actors pose as human resources (HR) departments and send emails claiming to contain information on upcoming salary increases and yearly bonuses. They deceive users into downloading unknown files, RMM tools, and more.
The NJCCIC observed a Ledger-themed cryptocurrency drainer phishing campaign targeting New Jersey State employees. Although “Ledger” appears in the sender’s display name, the sender’s email address comes from a “.kr” top-level domain (TLD) for South Korea.
The Aspen Cyber Summit is the nation’s premier annual technology and cybersecurity policy gathering. Since 2016, this flagship Aspen Institute conference has hosted the most consequential cybersecurity discussions of our time. This year, it was held on November 18.
The holiday season presents an attractive opportunity for threat actors to exploit holiday travelers making reservations and travel arrangements. Threat actors continue to impersonate major brands, create fraudulent websites, employ social engineering tactics, and more.
Multiple vulnerabilities have been discovered in Fortinet products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the affected service account.
