Автор: Jai Vijayan, Contributing Writer

Their findings highlight the frailty of some of the mechanisms for establishing trust on the Internet.

An attacker is using the tool to deploy a cryptominer and the Tsunami DDoS bot on compromised systems.

This month’s Patch Tuesday contains a total of 79 vulnerabilities — the fourth largest of the year.

CISA has added CE-2024-40766 to its Known Exploited Vulnerabilities catalog.

The vulnerabilities affect industrial control tech used across the healthcare and critical manufacturing sectors.

Adversaries reusing abandoned package names sneak malware into organizations in a sort of software shell game.

In recent years, the platform has become a go-to tool for executing almost all conceivable cybercriminal activity.

In a joint advisory, CISA and the FBI described the activity as a likely attempt by the group to monetize access to networks it already has compromised.

The pivot is one of several changes the groups using the malware have used in recent attacks.

The company has assessed four of the five disclosed vulnerabilities as being of high to critical severity.