Blog – Page 1135 – Cyber Mike

Warning: Over 2,000 Palo Alto Networks Devices Hacked in Ongoing Attack Campaign

As many as 2,000 Palo Alto Networks devices are estimated to have been compromised as part of a campaign abusing the newly disclosed security flaws that have come under active exploitation in the wild.
According to statistics shared by the Shadowserver Foundation, a majority of the infections have been reported in the U.S. (554) and India (461), followed by Thailand (80), Mexico (48), Indonesia

2,000 Palo Alto Firewalls Compromised via New Vulnerabilities

The number of internet-exposed Palo Alto firewalls is dropping, but 2,000 have been compromised, according to Shadowserver Foundation.

The post 2,000 Palo Alto Firewalls Compromised via New Vulnerabilities appeared first on SecurityWeek.

Wiz Buys Dazz for $450 Million

Dazz, based in Israel, raised about $110 million from prominent investors like Greylock, Cyberstarts, Insight Partners and Index Ventures.

The post Wiz Buys Dazz for $450 Million appeared first on SecurityWeek.

Chinese APT Gelsemium Targets Linux Systems with New WolfsBane Backdoor

The China-aligned advanced persistent threat (APT) actor known as Gelsemium has been observed using a new Linux backdoor dubbed WolfsBane as part of cyber attacks likely targeting East and Southeast Asia.
That’s according to findings from cybersecurity firm ESET based on multiple Linux samples uploaded to the VirusTotal platform from Taiwan, the Philippines, and Singapore in March 2023.

US seizes PopeyeTools cybercrime marketplace, charges administrators

The U.S. has seized the cybercrime website ‘PopeyeTools’ and unsealed charges against three of its administrators, Abdul Ghaffar, Abdul Sami, and Javed Mirza, for selling stolen data. […]

Fortinet VPN design flaw hides successful brute-force attacks

A design flaw in the Fortinet VPN server’s logging mechanism can be leveraged to conceal the successful verification of credentials during a brute-force attack without tipping off defenders of compromised logins. […]

After CrowdStrike Outage, Microsoft Debuts ‘Quick Machine Recovery’ Tool

Microsoft debuts Quick Machine Recovery tool to apply fixes even when machines are unable to boot, without needing physical access.

The post After CrowdStrike Outage, Microsoft Debuts ‘Quick Machine Recovery’ Tool appeared first on SecurityWeek.

RSA’s Innovation Sandbox: Cybersecurity Startups Must Accept $5 Million Investment

The owners of the RSA Conference will make a $5 million investment a prerequisite for all 10 finalists at next year’s Innovation Sandbox.

The post RSA’s Innovation Sandbox: Cybersecurity Startups Must Accept $5 Million Investment appeared first on SecurityWeek.

MITRE Updates List of 25 Most Dangerous Software Vulnerabilities

MITRE has released an updated CWE Top 25 Most Dangerous Software Weaknesses list, with cross-site scripting (XSS) at the top.

The post MITRE Updates List of 25 Most Dangerous Software Vulnerabilities appeared first on SecurityWeek.

ICS Security: 145,000 Systems Exposed to Web, Many Industrial Firms Hit by Attacks

Censys and Kaspersky publish ICS security reports looking into exposure to attacks and actual attacks suffered by industrial organizations.

The post ICS Security: 145,000 Systems Exposed to Web, Many Industrial Firms Hit by Attacks appeared first on SecurityWeek.

Cyber News