Check Point Rushes Hotfixes for a Firewall Zero-Day Used to Take Root. Attackers Chained It With PHP2Shell and Wiped a VMware Host 
Rogue Remote-Access Clients Are Spreading Through IT Providers’ ScreenConnect Panels. ConnectWise Has Switched Off Five Extensions 
Attackers Are Walking Into Xen Orchestra Without a Password and Taking Over XCP-ng Hosts. The Fix Is Out 
N-able Pulls Hosted N-central Offline After a Researcher Publishes 30-Plus Unpatched Flaws With Working Exploit Code 
A Factory-Default ‘admin’ Password Let Researchers Hijack Two Car Brands’ App Accounts, Then Unlock and Start a Test Car 
A Public Windows Exploit Turns a Microsoft Safety Feature Against Itself, and There Is No Patch Yet for SignDrop
Here Is How Layered Defenses Contain a Flaw You Can’t Patch Today On the same day Microsoft shipped its November...
FBI Moves to Seize $1.2 Billion Stolen From Binance and Disrupts ‘FaceStealer,’ a Fake Video-Call Scheme Blamed for $400 Million in Thefts: Your Questions Answered
U.S. authorities announced two actions this week against North Korean hackers. One recovers a share of the largest cryptocurrency theft...
NetScaler’s November Fix Batch, by the Numbers: Nine Critical Gateway Bugs, a Console Login Bypass and an Update Checklist
Citrix has released a large set of security fixes for NetScaler, the appliance many organizations use to publish remote access,...
Microsoft 365’s Outage Runs Into a Second Day: A Timeline of What Broke, What Microsoft Has Said, and What It Hasn’t
For many businesses, Thursday afternoon brought a sudden silence: Outlook would not connect, Teams messages stalled, and shared files went...
Police Pull the Plug on Gootloader, CastleRAT and StealC and Recover 6.4 Million Stolen Logins. Hacked WordPress Sites Were Part of the Machine
For years, a familiar pattern sat behind many ransomware attacks. Someone searching for a contract template or legal form clicked...
Check Point Rushes Hotfixes for a Firewall Zero-Day Used to Take Root. Attackers Chained It With PHP2Shell and Wiped a VMware Host
Check Point has pushed out emergency hotfixes for a flaw in its Gaia operating system that attackers have been using...
Patching the Hacked Website Isn’t the End of It: Microsoft Tracks Attackers Who Stay on Linux Servers Through a Public Relay
Here Is How Layered Defenses Close the Back Door That Patching Leaves Open When a company website gets hacked, the...
Accounting Firm Baker Tilly Tells Clients Their Data Was Taken From an Outside Provider’s Platform; Texas Filing Lists More Than 10,000 Residents
When a business hands its books to an accounting firm, it is trusting that firm with some of the most...
A Critical Apache Web Server Bug Hides in HTTP/2 Support: The Spec Sheet, and a Checklist for Updating or Switching It Off
Apache HTTP Server still runs a large share of the web, including many of the Linux servers behind company websites...
Thousands of Hijacked GitHub Accounts, One Fake ‘Audit Notes’ Pull Request: A Timeline of This Week’s CI Secret-Stealing Wave
If your company writes software, pays a developer, or relies on an outside firm whose code lives on GitHub, this...