Cisco customers hit by fresh wave of zero-day attacks from China-linked APT
Cisco has yet to release a patch for the actively exploited vulnerability, and attacks have been underway since at least late November.
Advertisement
Cybersecurity and Infrastructure Security Agency (CISA)
React2Shell fallout spreads to sensitive targets as public exploits hit all-time high
Attacker interest in the vulnerability is magnified by an unparalleled number of publicly available exploits, earning the defect the highest verified public exploit count of any CVE…
Key lawmaker says Congress likely to kick can down road on cyber information sharing law
House Homeland Security Chairman Andrew Garbarino, R-N.Y., also discussed Salt Typhoon, regulations and the cyber workforce Tuesday.
Attacks pinned to critical React2Shell defect surge, surpass 50 confirmed victims
Researchers warn that half of the exposed vulnerable instances remain unpatched as in-the-wild exploitation grows rapidly.
US charges hacker tied to Russian groups that targeted water systems and meat plants
Victoria Dubranova faces charges tied to her alleged role in two groups backed by the Russian government.
Advertisement
Microsoft’s last Patch Tuesday of 2025 addresses 57 defects, including one zero-day
Microsoft closed out the year with 1,139 total defects patched, making it the second-largest year in volume behind 2020, according to Trend Micro.
Bipartisan health care cybersecurity legislation returns to address a cornucopia of issues
The bill, first introduced late last year, deals with regulations, training, grants and more.
Officials warn about expansive, ongoing China espionage threat riding on Brickstorm malware
The attacks, which have impacted dozens of organizations, date back at least three years, lasting an average of 393 days. And that’s just what’s been uncovered in…
Sean Plankey nomination to lead CISA appears to be over after Thursday vote
A hold from Sen. Rick Scott, R- Fla., over a Coast Guard contract appears to be the major reason why.
Google addresses 107 Android vulnerabilities, including two zero-days
The company’s latest security update contains the second-highest number of defects patched so far this year.
Advertisement