Eduard Kovacs

Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of August 21,...

Congresswoman Nancy Mace has introduced a bill that would require federal contractors to have a Vulnerability Disclosure Policy (VDP).

Nearly 1,000 organizations and 60 million individuals are impacted by the MOVEit hack, and the Cl0p ransomware gang is leaking stolen data.

Mysterious Whiffy Recon malware scans for nearby Wi-Fi access points to obtain the location of the infected device.

Rockwell Automation ThinManager ThinServer vulnerabilities could allow remote attackers to  take control of servers and hack HMIs. 

A financially motivated cybercrime group has exploited a WinRAR zero-day to deliver malware to traders and steal their money.

Cybersecurity companies have released a dozen ransomware reports in recent weeks and most of them show a surge in attacks.

While initially it was unclear if the Ivanti Sentry vulnerability CVE-2023-38035 has been exploited, the vendor and CISA have now confirmed it.

The BlackCat/ALPHV ransomware group has started publishing data allegedly stolen from Japanese watchmaking giant Seiko.

Energy One, an Australian company that provides software products and services to the energy sector, has been hit by a cyberattack.

CISA warns that CVE-2023-26359, an Adobe ColdFusion vulnerability patched in March, has been exploited in the wild.

Australian lender Latitude Financial said the recent ransomware attack has cost it AU$76 million (roughly US$50 million).