Critical TeamCity authentication bypass vulnerability CVE-2024-27198 exploited in the wild after details were disclosed.
The post Critical TeamCity Vulnerability Exploitation Started Immediately After Disclosure appeared first on SecurityWeek.
CrowdStrike to Acquire Flow Security
CrowdStrike says the acquisition of Flow Security will expand its cloud security capabilities with Data Security Posture Management.
The post CrowdStrike to Acquire Flow Security appeared first on SecurityWeek.
Zeek Security Tool Vulnerabilities Allow ICS Network Hacking
Vulnerabilities in a plugin for the Zeek network security monitoring tool can be exploited in attacks aimed at ICS environments.
The post Zeek Security Tool Vulnerabilities Allow ICS Network Hacking appeared first on SecurityWeek.
Remote Stuxnet-Style Attack Possible With Web-Based PLC Malware: Researchers
Researchers demonstrate that remote Stuxnet-style attacks are possible against many modern PLCs using web-based malware.
The post Remote Stuxnet-Style Attack Possible With Web-Based PLC Malware: Researchers appeared first on SecurityWeek.
Georgia’s Largest County Is Still Repairing Damage From January Cyberattack
Georgia’s largest county is still repairing damage inflicted on its government offices by a cyberattack in January 2024.
The post Georgia’s Largest County Is Still Repairing Damage From January Cyberattack appeared first on SecurityWeek.
Pentagon Leak Suspect Jack Teixeira Expected to Plead Guilty in Federal Case
The Air National Guardsman accused of leaking highly classified military documents on social media is expected to plead guilty in his federal case.
The post Pentagon Leak Suspect Jack Teixeira Expected to Plead Guilty in Federal Case appeared first on SecurityWeek.
CISA Warns of Windows Streaming Service Vulnerability Exploitation
CISA says a high-severity elevation of privilege vulnerability in Microsoft Streaming Service is actively exploited in the wild.
The post CISA Warns of Windows Streaming Service Vulnerability Exploitation appeared first on SecurityWeek.
Windows Zero-Day Exploited by North Korean Hackers in Rootkit Attack
North Korean group Lazarus exploited AppLocker driver zero-day CVE-2024-21338 for privilege escalation in attacks involving FudModule rootkit.
The post Windows Zero-Day Exploited by North Korean Hackers in Rootkit Attack appeared first on SecurityWeek.
Intel Core Ultra vPro Platform Brings New Security Features
Intel announces new and improved security features with the latest vPro platform and Core Ultra processors.
The post Intel Core Ultra vPro Platform Brings New Security Features appeared first on SecurityWeek.
NIST Cybersecurity Framework 2.0 Officially Released
NIST releases Cybersecurity Framework 2.0, the first major update since the creation of the CSF a decade ago.
The post NIST Cybersecurity Framework 2.0 Officially Released appeared first on SecurityWeek.
