MITRE has created two new organizations intended to help the company better focus on cybersecurity threats to critical infrastructure and new approaches to public health challenges. click here to read full Article Read More...
A now-patched critical vulnerability in OpenSea, the world’s largest non-fungible token (NFT) marketplace, could’ve been abused by malicious actors to drain cryptocurrency funds from a victim by sending a specially-crafted token, opening a new...
Critical infrastructure owners and operators also would be required to provide supplemental reports to the CISA in light of new or different information becoming available. click here to read full Article Read More on...
The upcoming changes will make it mandatory for rail, air companies to name a chief cyber official, disclose hacks to the government, and draft recovery plans if an attack were to occur. click here...
In this interview with Help Net Security, James Carder, CSO & VP of Labs at LogRhythm, talks about critical infrastructure IoT security, the vulnerabilities that are plaguing this type of technology, and how to...
A CISA advisory warned regarding multiple security vulnerabilities affecting all versions of Honeywell Experion PKS and ACE controllers that could enable remote code execution and denial-of-service. click here to read full Article Read more...
Lawmakers heard expert testimony Thursday in favor of expanding and strengthening some regulations, including updating the 2014 Federal Information Security Modernization Act. click here to read full Article Read More on latest Security Updates
Tracked as CVE-2021-34351 and CVE-2021-34348, the pair of critical bugs could allow a remote attacker to run commands on vulnerable systems that could lead to taking full control of the device. click here to...
Network security company SonicWall has addressed a critical security vulnerability affecting its Secure Mobile Access (SMA) 100 series appliances that can permit remote, unauthenticated attackers to gain administrator access on targeted devices remotely. Tracked...
The vulnerability could potentially allow a remote unauthenticated attacker the ability to delete arbitrary files from an SMA 100 series appliance and gain administrator access to the device. click here to read full Article...
Cybersecurity leaders back law for critical infrastructure click here to read full Article Read More on latest Security Updates
Dams, levees, and other water structures are considered part of the 16 critical infrastructure sectors overseen by CISA, according to the Department of Homeland Security’s inspector general’s report. click here to read full Article...
Microsoft on Tuesday addressed a quartet of security flaws as part of its Patch Tuesday updates that could be abused by adversaries to target Azure cloud customers and elevate privileges as well as allow for remote...
The security issue is identified as CVE-2021-40539. It is considered critical as it can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. click here to read full Article Read...
Tracked as CVE-2021-40346, the Integer Overflow vulnerability has a severity rating of 8.6 on the CVSS scoring system and has been rectified in HAProxy versions 2.0.25, 2.2.17, 2.3.14, and 2.4.4. click here to read...
Networking, storage and security solutions provider Netgear has issued patches to address three security vulnerabilities affecting its smart switches that could be abused by an adversary to gain full control of a vulnerable device....
