Security News
![GitLab warns of critical zero-click account hijacking vulnerability](/static/build/img/news/gitlab-warns-of-critical-zero-click-account-hijacking-vulnerability-small.jpg)
GitLab has released security updates for both the Community and Enterprise Edition to address two critical vulnerabilities, one of them allowing account hijacking with no user interaction. The most critical security issue GitLab patched has the maximum severity score and is being tracked as CVE-2023-7028.
![Juniper warns of critical RCE bug in its firewalls and switches](/static/build/img/news/juniper-warns-of-critical-rce-bug-in-its-firewalls-and-switches-small.jpg)
Juniper Networks has released security updates to fix a critical pre-auth remote code execution vulnerability in its SRX Series firewalls and EX Series switches. CISA also warned in November of a Juniper pre-auth RCE exploit used in the wild, chaining four bugs tracked as CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, and CVE-2023-36847 and impacted the company's SRX firewalls and EX switches.
![Secret multimillion-dollar cryptojacker snared by Ukrainian police](/static/build/img/news/secret-multimillion-dollar-cryptojacker-snared-by-ukrainian-police-small.jpg)
Supported by the National Police of Ukraine, Europol arrested a 29-year-old, whose identity is being withheld, this week in Mykolaiv, Ukraine. An unnamed cloud provider worked with Europol et al to bring the crook into custody - an effort that also saw three properties raided as authorities built up their portfolio of evidence against them.
![Ivanti Connect Secure zero-days exploited to deploy custom malware](/static/build/img/news/ivanti-connect-secure-zero-days-exploited-to-deploy-custom-malware-small.jpg)
Hackers have been exploiting the two zero-day vulnerabilities in Ivanti Connect Secure disclosed this week since early December to deploy multiple families of custom malware for espionage purposes. Zipline Passive Backdoor: custom malware that can intercept network traffic, supports upload/download operations, creating reverse shells, proxy servers, server tunneling.
![Secure network operations for hybrid working](/static/build/img/news/secure-network-operations-for-hybrid-working-small.jpg)
Webinar Remote working has rapidly become the norm for many organizations and isn't ever going away. It still needs to be secure if it's to be a success.
![Akira ransomware attackers are wiping NAS and tape backups](/static/build/img/news/akira-ransomware-attackers-are-wiping-nas-and-tape-backups-small.jpg)
NCSC-FI has received 12 reports of Akira ransomware hitting Finnish organizations in 2023, and three of the attacks happened during Christmas vacations. "Of the ransomware malware cases reported to the Cybersecurity Center in December, six out of seven involved Akira family malware," they added.
![Nation-State Actors Weaponize Ivanti VPN Zero-Days, Deploying 5 Malware Families](/static/build/img/news/nation-state-actors-weaponize-ivanti-vpn-zero-days-deploying-5-malware-families-small.jpg)
As many as five different malware families were deployed by suspected nation-state actors as part of post-exploitation activities leveraging two zero-day vulnerabilities in Ivanti Connect Secure...
![Medusa Ransomware on the Rise: From Data Leaks to Multi-Extortion](/static/build/img/news/medusa-ransomware-on-the-rise-from-data-leaks-to-multi-extortion-small.jpg)
The threat actors associated with the Medusa ransomware have ramped up their activities following the debut of a dedicated data leak site on the dark web in February 2023 to publish sensitive data...
![So, are we going to talk about how GitHub is an absolute boon for malware, or nah?](/static/build/img/news/so-are-we-going-to-talk-about-how-github-is-an-absolute-boon-for-malware-or-nah-small.jpg)
In a report published on Thursday, security shop Recorded Future warns that GitHub's infrastructure is frequently abused by criminals to support and deliver malware. GitHub domains are seldom blocked by corporate networks, making it a reliable hosting site for malware.
![Applying the Tyson Principle to Cybersecurity: Why Attack Simulation is Key to Avoiding a KO](/static/build/img/news/applying-the-tyson-principle-to-cybersecurity-why-attack-simulation-is-key-to-avoiding-a-ko-small.jpg)
Picture a cybersecurity landscape where defenses are impenetrable, and threats are nothing more than mere disturbances deflected by a strong shield. Sadly, this image of fortitude remains a pipe...