Incident Command/Situational Awareness

Fortinet zero-day attack spree hits at least 50 customers

Attackers are actively exploiting a critical zero-day vulnerability in Fortinet’s network and security management tool FortiManager, according to security researchers and federal authorities. The earliest exploitation was on June 27, and at least 50 organizations across various industries have been impacted to date, Mandiant said in a Wednesday blog post. Fortinet disclosed active exploitation of CVE-2024-47575, which has […]

Nearly 100 utilities’ credit ratings downgraded since 2020 as wildfire risks grow

Increased wildfire risk has contributed to nearly 100 utility company credit downgrades since 2020, according to a report by global consulting firm Charles River Associates. Lower credit ratings have made it more difficult for utilities to borrow money while insurance and wildfire mitigation costs have increased, the report states. These costs have largely been passed on to […]

Russia-linked hackers attack Japan’s goverment, ports

Two Russian hacking groups leveled distributed denial-of-service (DDoS) attacks at Japanese logistics and shipbuilding firms — as well as government and political organizations — in what experts believe are attempts to pressure the Japanese government. The attacks came after lawmakers boosted the nation’s defense budget, and its military conducted exercises with regional allies. The two pro-Russian […]

Real-time crime center helps Glendale (Ariz.) police ‘do more with less,’ chief says

Real-time crime center technology integrated with other resources can help improve public-safety agencies improve efficiency while enhancing the safety of citizens and first responders, according to Glendale (Ariz.) Police Department Chief Chris Briggs. Brigg said the Glendale Police Department has been operating its real-time crime center (RTCC) since 2018, when the center primarily received and […]

CISA adds SolarWinds flaw to exploited vulnerabilities catalog

The Cybersecurity and Infrastructure Security Agency added a critical hardcoded credentials flaw in SolarWinds Web Help Desk to its known exploited vulnerabilities catalog on Tuesday, marking the second actively exploited CVE in the same product since August. The vulnerability, listed as CVE-2024-28987, allows a remote, unauthenticated attacker to access internal functionality and potentially modify data. The software defect […]

Microsoft reveals ransomware attacks against its customers nearly tripled last year

Microsoft customers confronted nearly triple the amount of ransomware attacks during the one-year period ending in June, the company said Tuesday in its Digital Defense Report. Microsoft observed a 275% year-over-year increase in human-operated ransomware attacks between July 2023 and June 2024. This increase in ransomware attacks was partially offset by a sustained decrease in cyberattacks reaching the encryption stage, the report found. “The […]
1 2 3 4 5 … 223

Commentary

view all

Events

UC Ezines

view all