The United States Department of Health and Human Services' Health Sector Cybersecurity Coordination Center (HC3) released this Threat Actor Profile regarding a relatively new threat actor identified as Trinity Ransomware. The analysis is focused on the Healthcare Sector...
Multiple vulnerabilities have been discovered in Google Android OS, the most severe of which could allow for remote code execution. Android is an operating system developed by Google for mobile devices, including, but not limited to, smartphones, tablets, and watches.
Attached is a White Paper, 2024 Election Threat Landscape. This paper discusses threats from the cyber, physical, and hybrid perspectives and includes recommendations for election offices and associated parties to implement to improve their preparedness.
Researchers have identified multiple critical security vulnerabilities in automatic tank gauge (ATG) systems, some of which remain unpatched. These vulnerabilities pose a threat to critical infrastructure facilities, potentially leading to disruption and physical damage.
A suspected Chinese (PRC) state-sponsored cyber threat group, Salt Typhoon, was recently identified accessing multiple United States internet service providers (ISPs) to conduct cyber espionage. This attack is the latest of campaigns sponsored by the Chinese government.
As the implementation of multi-factor authentication (MFA) becomes prevalent, there is a growing surge in attempts to bypass, breach, and hijack its security measures. Threat actors have increasingly utilized session hijacking in attempts to bypass MFA checkpoints.
This Multi-State Information Sharing and Analysis Center (MS-ISAC) Advisory is being provided to assist agencies and organizations in guarding against the persistent malicious actions of cybercriminals. A vulnerability has been discovered in Zimbra Collaboration...
The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC)—in partnership with the Cybersecurity and Infrastructure Security Agency (CISA), United States government, and international partners—released the Principles of Operational Technology Cybersecurity.
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user.
Multiple vulnerabilities have been discovered in Mozilla products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution. Depending on the privileges of the user...
