Messaging and collaboration software maker Zimbra has rushed out patches to provide cover for a code execution flaw that has already been exploited to plant malware on target machines.
Zimbra Patches Under-Attack Code Execution Bug
Zoom for macOS Contains High-Risk Security Flaw
Video messaging technology powerhouse Zoom has rolled out a high-priority patch for macOS users alongside a warning that hackers could abuse the software flaw to connect to and control Zoom Apps.
Seven ‘Creepy’ Backdoors Used by Lebanese Cyberspy Group in Israel Attacks
ESET has published an analysis of the seven backdoors that Lebanese advanced persistent threat (APT) actor Polonium has been using since September 2021 in attacks targeting Israeli organizations.
New Chinese Cyberespionage Group WIP19 Targets Telcos, IT Service Providers
A newly identified cyberespionage group operating out of China has been targeting IT services providers and telecommunications companies with signed malware.
Chinese Cyberspies Targeting US State Legislature
A China-linked cyberespionage group was recently observed targeting a state legislature in the United States, Symantec warns.
Microsoft Warns of New Zero-Day; No Fix Yet For Exploited Exchange Server Flaws
Microsoft on Tuesday released software fixes to address more than 90 security defects affecting products in the Windows ecosystem and warned that one of the vulnerabilities was already being exploited as zero-day in the wild.
Fortinet Confirms Zero-Day Vulnerability Exploited in One Attack
Fortinet has confirmed that the critical vulnerability whose existence came to light last week is a zero-day flaw that has been exploited in at least one attack.
UK Spy Chief to Warn of ‘Huge’ China Tech Threat
Britain’s GCHQ spy agency chief will warn Western countries Tuesday of the “huge threat” from China seeking to exploit its tech dominance to control its own citizens and gain influence abroad.
Endor Labs Joins Race to Secure Software Supply Chain
It’s officially a venture capital funding frenzy in the software supply chain security space.
German Cybersecurity Chief to be Sacked Over Alleged Russia Ties: Sources
Germany is planning to fire Arne Schoenbohm, the head of the BSI national cyber security agency, after reports he had contacts with Russian intelligence services, government sources told AFP on Monday.
The interior ministry said it is “taking reports seriously” and “investigating them comprehensively”.
