Zeljka Zorz

Ivanti zero-day exploited to target Norwegian government (CVE-2023-35078)

July 25, 2023

A zero-day vulnerability (CVE-2023-35078) affecting Ivanti Endpoint Manager Mobile (EPMM) has been exploited to carry out an attack that affected 12 Norwegian ministries, the …

Has the MOVEit hack paid off for Cl0p?

July 24, 2023

The number of known Cl0p victims resulting from its Memorial Day attack on vulnerable internet-facing MOVEit Transfer installations has surpassed 420, according to IT market …

Citrix ADC zero-day exploitation: CISA releases details about attack on CI organization (CVE-2023-3519)

July 21, 2023

The exploitation of the Citrix NetScaler ADC zero-day vulnerability (CVE-2023-3519) was first spotted by a critical infrastructure organization, who reported it to the …

Thanks Storm-0558! Microsoft to expand default access to cloud logs

July 20, 2023

Starting in September 2023, more federal government and commercial Microsoft customers will have access to expanded cloud logging capabilities at no additional charge, …

Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203)

July 18, 2023

Attackers are exploiting two Adobe ColdFusion vulnerabilities (CVE-2023-29298, CVE-2023-38203) to breach servers and install web shells to enable persistent access and allow …

Meta’s Threads app used as a lure

July 14, 2023

It was to be expected: As the buzz around Meta’s new microblogging platform Threads gained momentum, some individuals have stepped in to take advantage of the fact that …

Unnamed APT eyes vulnerabilities in Rockwell Automation industrial contollers (CVE-2023-3595 CVE-2023-3596)

July 13, 2023

Rockwell Automation has fixed two vulnerabilities (CVE-2023-3595, CVE-2023-3596) in the communication modules of its ControlLogix industrial programmable logic controllers …

Chinese hackers forged authentication tokens to breach government emails

July 12, 2023

Sophisticated hackers have accessed email accounts of organizations and government agencies via authentication tokens they forged by using an acquired Microsoft account (MSA) …

Microsoft patches four exploited zero-days, but lags with fixes for a fifth (CVE-2023-36884)

July 11, 2023

For July 2023 Patch Tuesday, Microsoft has delivered 130 patches; among them are four for vulnerabilites actively exploited by attackers, but no patch for CVE-2023-36884, an …

Apple pushes out emergency fix for actively exploited zero-day (CVE-2023-37450)

July 11, 2023

Apple has patched an actively exploited zero-day vulnerability (CVE-2023-37450) by releasing Rapid Security Response updates for iPhones, iPads and Macs running the latest …

Flaw in Revolut payment systems exploited to steal $20 million

July 10, 2023

Organized criminal groups exploited a flaw in Revolut’s payment systems and made off with $20+ million of the company’s money, the Financial Times reported on Sunday, …

Malware delivery to Microsoft Teams users made easy