Hackers breach US govt agencies using Adobe ColdFusion exploit


The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning about hackers actively exploiting a critical vulnerability in Adobe ColdFusion identified as CVE-2023-26360 to gain initial access to government servers. [...]


https://www.bleepingcomputer.com/news/se...n-exploit/

Microsoft to let Windows 10 home users buy Extended Security Updates


Microsoft says that all Windows 10 customers (including home users) will be able to pay for three extra years of security updates through the company's Extended Security Updates (ESU) program after the end of support (EOS) date. [...]


https://www.bleepingcomputer.com/news/mi...y-updates/

Kali Linux 2023.4 released with GNOME 45 and 15 new tools


Kali Linux 2023.4, the fourth and final version of 2023, is now available for download, with fifteen new tools and the GNOME 45 desktop environment. [...]


https://www.bleepingcomputer.com/news/se...new-tools/

Multiple NFT collections at risk by flaw in open-source library


A vulnerability in an open-source library that is common across the Web3 space impacts the security of pre-built smart contracts, affecting multiple NFT collections, including Coinbase. [...]


https://www.bleepingcomputer.com/news/se...e-library/

HTC Global Services confirms cyberattack after data leaked online


IT services and business consulting company HTC Global Services has confirmed that they suffered a cyberattack after the ALPHV ransomware gang began leaking screenshots of stolen data. [...]


https://www.bleepingcomputer.com/news/se...ed-online/

"Sierra:21" vulnerabilities impact critical infrastructure routers


A set of 21 newly discovered vulnerabilities impact Sierra OT/IoT routers and threaten critical infrastructure with remote code execution, unauthorized access, cross-site scripting, authentication bypass, and denial of service attacks. [...]


https://www.bleepingcomputer.com/news/se...e-routers/

Nissan is investigating cyberattack and potential data breach


Japanese car maker Nissan is investigating a cyberattack that targeted its systems in Australia and New Zealand, which may have let hackers access personal information. [...]


https://www.bleepingcomputer.com/news/se...ta-breach/

Varonis Introduces Athena AI to Transform Data Security and Incident Response


Athena AI, a new generative AI layer that spans across the entire Varonis Data Security Platform, enhances how security teams protect data — from visibility to action. Learn more from Varonis in this article. [...]


https://www.bleepingcomputer.com/news/se...-response/

Atlassian patches critical RCE flaws across multiple products


Atlassian has published security advisories for four critical remote code execution (RCE) vulnerabilities impacting Confluence, Jira, and Bitbucket servers, along with a companion app for macOS. [...]


https://www.bleepingcomputer.com/news/se...-products/

Navy contractor Austal USA confirms cyberattack after data leak


Austal USA, a shipbuilding company and a contractor for the U.S. Department of Defense (DoD) and the Department of Homeland Security (DHS) confirmed that it suffered a cyberattack and is currently investigating the impact of the incident. [...]


https://www.bleepingcomputer.com/news/se...data-leak/