Security News

HTTP your way into Citrix's Virtual Apps and Desktops with fresh exploit code
2024-11-12 16:11

'Once again, we've lost a little more faith in the internet,' researcher says Researchers are publicizing a proof of concept (PoC) exploit for what they're calling an unauthenticated remote code...

New Flaws in Citrix Virtual Apps Enable RCE Attacks via MSMQ Misconfiguration
2024-11-12 14:01

Cybersecurity researchers have disclosed new security flaws impacting Citrix Virtual Apps and Desktop that could be exploited to achieve unauthenticated remote code execution (RCE) The issue, per...

Microsoft warns Azure Virtual Desktop users of black screen issues
2024-11-01 23:20

Microsoft warned customers they might experience up to 30 minutes of black screens when logging into Azure Virtual Desktop (AVD) after installing the KB5040525 Windows 10 July 2024 preview update. [...]

Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers
2024-09-13 13:51

Details have emerged about a now-patched security flaw impacting Apple's Vision Pro mixed reality headset that, if successfully exploited, could allow malicious attackers to infer data entered on...

The State of the Virtual CISO Report: MSP/MSSP Security Strategies for 2025
2024-09-06 09:37

The 2024 State of the vCISO Report continues Cynomi’s tradition of examining the growing popularity of virtual Chief Information Security Officer (vCISO) services. According to the independent...

Critical Flaw in Ivanti Virtual Traffic Manager Could Allow Rogue Admin Access
2024-08-14 05:18

Ivanti has rolled out security updates for a critical flaw in Virtual Traffic Manager (vTM) that could be exploited to achieve an authentication bypass and create rogue administrative users. The...

OneBlood's virtual machines encrypted in ransomware attack
2024-07-31 18:16

OneBlood, a large not-for-profit blood center that serves hospitals and patients in the United States, is dealing with an IT systems outage caused by a ransomware attack. [...]

Former IT employee gets 2.5 years for wiping 180 virtual servers
2024-06-14 15:51

A former quality assurance employee of National Computer Systems was sentenced to two years and eight months in prison for reportedly deleting 180 virtual servers after being fired. Nagaraju Kandula, 39, pleaded guilty to deleting the virtual servers in an attempt to sabotage the firm's systems out of spite for getting fired from NCS, causing damages estimated to $678,0000.

Former IT staff gets 2.5 years for wiping 180 virtual servers
2024-06-14 15:51

A former quality assurance employee of National Computer Systems was sentenced to two years and eight months in prison for reportedly deleting 180 virtual servers after being fired. Nagaraju Kandula, 39, pleaded guilty to deleting the virtual servers in an attempt to sabotage the firm's systems out of spite for getting fired from NCS, causing damages estimated to $678,0000.

The Week in Ransomware - April 5th 2024 - Virtual Machines under Attack
2024-04-05 21:59

Ransomware attacks targeting VMware ESXi and other virtual machine platforms are wreaking havoc among the enterprise, causing widespread disruption and loss of services. Panera's massive IT outage last month that took down internal systems, the website, mobile apps, and phones was caused by a ransomware attack encrypting the company's virtual machines.