The information in this Cybersecurity and Infrastructure Security Agency (CISA) Alert is being provided as is for informational purposes only. CISA does not endorse any commercial entity, product, company, or service, including any entities, products, or services linked within this document.
Boyd Gaming Corporation, one of the largest US casino entertainment companies, disclosed a data breach that did not impact its properties or business operations. An investigation revealed that an unauthorized third party accessed internal systems and stole certain data.
Motility Software Solutions, a provider of dealer management software (DMS), detected unusual activity within specific computer servers supporting business operations around August 19. An unauthorized threat actor deployed malware that encrypted some systems.
Allianz Life Insurance Company disclosed a data breach impacting approximately 1.4 million customers, financial professionals, and select Allianz Life employees. The security incident that occured on July 16 was limited to a third-party cloud-based CRM system.
The NJCCIC received reports of threat actors impersonating multiple New Jersey local municipalities to steal sensitive data and funds and exploit public trust. Threat actors take advantage of residents who interact with their local municipalities regularly and are more likely to trust...
SonicWall initially issued an advisory of a notable increase in both internally and externally reported cyber incidents involving Gen 7 SonicWall firewalls where SSL VPN is enabled. A likely zero-day vulnerability in SonicWall VPNs was being actively exploited to bypass MFA...
Over the last several days, SonicWall issued an advisory of a notable increase in both internally and externally reported cyber incidents involving Gen 7 SonicWall firewalls where SSL VPN is enabled. A likely zero-day vulnerability in SonicWall VPNs is being actively exploited.
The Federal Bureau of Investigation (FBI) released this FBI Liaison Alert System (FLASH) to disseminate indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with 5Socks and Anyproxy cyber criminal services' targeting malware that affects EOL
The NJCCIC was recently notified of a cyber incident in which a threat actor compromised a user's account credentials by targeting the Password Hash Synchronization (PHS) login method. Azure utilizes PHS to validate credentials and authenticate users without needing an additional...
A new botnet known as Eleven11bot quickly became one of the largest in the last several years, infecting over 86,000 Internet of Things (IoT) devices. The botnet, mainly comprised of security cameras and network video recorders, has been used to launch distributed denial-of-service.
