1+ week, 6+ day ago   (446+ words) Incident & Breach Response, Security Operations Widely used print management software vendor PaperCut published two emergency patches as it battles attackers actively exploiting zero-day vulnerabilities in its tools. See Also: Scattered Spider Exposed: Critical Takeaways for Cyber Defenders "PaperCut Software security…...

2+ week, 5+ day ago   (324+ words) Fraud Management & Cybercrime, Governance & Risk Management, Patch Management A flaw in office productivity software suite Zimbra has left 267 instances compromised globally as of Monday and over 8,000 unpatched instances vulnerable, recent data shows. See Also: Securing Your Workforce with Datto RMM:…...

2+ week, 5+ day ago   (427+ words) Cyberwarfare / Nation-State Attacks, Fraud Management & Cybercrime, Governance & Risk Management A maximum-severity Oracle flaw is under active exploitation, with the U.S. Cybersecurity and Infrastructure Security Agency giving federal agencies no more than three days to implement a patch. See Also: Securing Your…...

3+ week, 2+ day ago   (539+ words) Extortion gang ShinyHunters has struck the healthcare sector again. The notorious cybercriminal gang claims on its darkweb site of leaking 7.1 million Salesforce records stolen from medical device maker Baxter International, including personally identifiable information. See Also: Rise of Malicious AI…...

3+ week, 3+ day ago   (726+ words) Cybercrime, Data Breach Notification, Data Privacy Genomics testing firm Baylor Genetics is notifying nearly 310,000 people and counting about a June hack that compromised sensitive patient information including test results and employee data. The incident is the latest in a rash…...

3+ week, 4+ day ago   (185+ words) Agentic AI, Artificial Intelligence & Machine Learning, Next-Generation Technologies & Secure Development Some organizations have turned security awareness administration over to artificial intelligence, while others combine AI with human administrators or continue to rely primarily on people, said KnowBe4 CEO Bryan Palma. See…...

3+ week, 4+ day ago   (351+ words) Incident & Breach Response, Security Operations A critical code injection vulnerability in GitLab is being exploited in the wild two days after the vendor disclosed the flaw and issued an emergency patch, researchers found. See Also: Scattered Spider Exposed: Critical Takeaways…...

3+ week, 5+ day ago   (667+ words) Cyberwarfare / Nation-State Attacks, Fraud Management & Cybercrime China-linked remote access Trojans show that sophisticated malware is still developed by hand and the use of artificial intelligence is the cherry on top, researchers said. See Also: Experts Offer Insights from Theoretical to…...