Security Affairs

FEBRUARY 17, 2024

CISA warns that the Akira Ransomware gang is exploiting the Cisco ASA/FTD vulnerability CVE-2020-3259 (CVSS score: 7.5) The issue was listed by CISA as known to be used in ransomware campaigns, but the agency did not reveal which ransomware groups are actively exploiting the issue. in attacks in the wild. This week the U.S.

Ransomware 127

Ransomware Education Cybersecurity Passwords 127

Security Affairs

MARCH 6, 2024

CVE-2024-23225 is a Kernel memory corruption flaw, the company addressed it with improved validation. “An CVE-2024-23296 is a RTKit memory corruption flaw, the company addressed it with improved validation. CISA orders federal agencies to fix this vulnerability by March 27, 2024. reads the advisory.

IT 106

IT Cybersecurity Ransomware Risk 106

Security Affairs

MARCH 5, 2024

Cybersecurity and Infrastructure Security Agency (CISA) added the CVE-2024-21338 (CVSS Score 7.8) The zero-day, tracked as CVE-2024-21338 has been addressed by Microsoft in the February Patch Tuesday update. The flaw CVE-2024-21338 resides within the IOCTL (Input and Output Control) dispatcher of the driver appid.sys.

IT 106

IT Cybersecurity Ransomware Access 106

Security Affairs

MARCH 6, 2024

According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities , FCEB agencies have to address the identified vulnerabilities by the due date to protect their networks against attacks exploiting the flaws in the catalog. The exploitation can lead to complete system compromise.

IT 110

IT Cybersecurity Ransomware Risk 110

Security Affairs

FEBRUARY 22, 2024

Cybersecurity and Infrastructure Security Agency (CISA) added a ConnectWise ScreenConnect vulnerability, tracked as CVE-2024-1709 , to its Known Exploited Vulnerabilities (KEV) catalog. CISA is aware that this vulnerability is exploited in ransomware attacks, Sophos researchers also confirmed this circumstance. ” said Sophos.

Authentication 103

Authentication Cybersecurity Cloud Ransomware 103

Security Affairs

JANUARY 9, 2024

According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities , FCEB agencies have to address the identified vulnerabilities by the due date to protect their networks against attacks exploiting the flaws in the catalog. Improper Access Control Vulnerability CVE-2023-23752.

IT 95

IT Cybersecurity Authentication Ransomware 95