Flawed N-able Patch Leaves N-central Open to Takeover
Flawed N-able Patch Leaves N-central Open to Takeover

An incomplete security fix has left thousands of managed service provider servers vulnerable to...

Amgen Cloud Breach Exposes PHI and Corporate Secrets
Amgen Cloud Breach Exposes PHI and Corporate Secrets

Biology and pharmaceutical technology conglomerate Amgen announced that there had been a security...

Cisco FMC Hardcoded Password Now on CISA’s Urgent List
Cisco FMC Hardcoded Password Now on CISA’s Urgent List

Cisco built a password into its own firewall management software. Not a default password an admin...

Iran-Linked Hackers Suspected in Minnesota Water Attack
Iran-Linked Hackers Suspected in Minnesota Water Attack

More than 30 water utilities across Minnesota got hit at once. That’s not a metaphor. A...

Certighost Flaw Lets Low-Privilege Users Fake Your DC
Certighost Flaw Lets Low-Privilege Users Fake Your DC

Active Directory has one job, decide who gets to act as a domain controller. A flaw patched this...

MedusaHVNC Hides On A Desktop You’ll Never See
MedusaHVNC Hides On A Desktop You’ll Never See

Picture someone browsing through your own accounts right now. They’re using your saved...

Fastjson Zero-Day Has No Patch, Attackers Already In
Fastjson Zero-Day Has No Patch, Attackers Already In

A critical flaw in Fastjson, the Java library Alibaba built for parsing JSON, is being actively...

Fake Notepad++ Plugin Hijacks a Trusted Editor to Deliver MATCHBOIL.V2 Malware
Fake Notepad++ Plugin Hijacks a Trusted Editor to Deliver MATCHBOIL.V2 Malware

A trusted code editor becomes the vessel for spyware malware. According to CERT-UA, the latest...

Stadler Rail Ransomware Attack: Swiss Train Giant Refused $12.3M
Stadler Rail Ransomware Attack: Swiss Train Giant Refused $12.3M

Refusing The Ransom: What Stadler Decided Stadler Rail, the Swiss train manufacturer, refused a...