CISA Adds One Known Exploited Vulnerability to Catalog

by admin | Feb 29, 2024 | Cybersecurity Alerts, News, and Tips

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-29360 Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability These types of vulnerabilities are frequent...

CISA and Partners Release Advisory on Threat Actors Exploiting Ivanti Connect Secure and Policy Secure Gateways Vulnerabilities

by admin | Feb 29, 2024 | Cybersecurity Alerts, News, and Tips

Today, CISA and the following partners released joint Cybersecurity Advisory Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways:  Federal Bureau of Investigation (FBI)  Multi-State Information Sharing &...

CISA Releases Two Industrial Control Systems Advisories

by admin | Feb 29, 2024 | Cybersecurity Alerts, News, and Tips

CISA released two Industrial Control Systems (ICS) advisories on February 29, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-060-01 Delta Electronics CNCSoft-B ICSMA-24-060-01...

CISA, FBI, and MS-ISAC Release Advisory on Phobos Ransomware

by admin | Feb 29, 2024 | Cybersecurity Alerts, News, and Tips

Today, CISA, the Federal Bureau of Investigation (FBI), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) released a joint Cybersecurity Advisory (CSA), #StopRansomware: Phobos Ransomware, to disseminate known tactics, techniques, and procedures...

NIST Adds “Govern” Function to Cybersecurity Framework

by admin | Feb 28, 2024 | Cybersecurity Alerts, News, and Tips

NIST CFS’s new governance component offers opportunities for MSSPs and MSPs.

Change Healthcare Cyberattack: Impacts and Threat Actor Theories

by admin | Feb 28, 2024 | Cybersecurity Alerts, News, and Tips

Theories tie the attack to the ALPHV/BlackCat ransomware crew and the ConnectWise vulnerability.