Britain’s GCHQ spy agency chief will warn Western countries Tuesday of the “huge threat” from China seeking to exploit its tech dominance to control its own citizens and gain influence abroad.
UK Spy Chief to Warn of ‘Huge’ China Tech Threat
US Airport Websites Hit by Suspected Pro-Russian Cyberattacks
The websites for a number of major US airports were briefly taken offline Monday after a cyberattack promoted by a pro-Russian hacking group.
The distributed denial of service (DDoS) attacks hit the airport websites of several major US cities including Atlanta, Chicago, Los Angeles, New York, Phoenix and St Louis.
Endor Labs Joins Race to Secure Software Supply Chain
It’s officially a venture capital funding frenzy in the software supply chain security space.
State Bar of Georgia Confirms Data Breach Following Ransomware Attack
The State Bar of Georgia was hit by a ransomware attack earlier this year and the organization has now confirmed that member and employee information was compromised.
Critical Zimbra RCE Vulnerability Exploited in Attacks
The Zimbra Collaboration Suite is impacted by a critical remote code execution vulnerability that remains unpatched, despite being exploited in attacks.
Several Horner PLC Software Vulnerabilities Allow Code Execution via Malicious Font Files
A cybersecurity researcher has discovered a total of seven high-severity remote code execution vulnerabilities in Horner Automation’s Cscape product and they can all be exploited using malicious font files.
Second Australia-Based Singtel Subsidiary Hacked
Hackers have attacked a second subsidiary of Singapore Telecommunications Ltd (Singtel), the company said Monday, but analysts said it appeared the Southeast Asian telecom giant was not being specifically targeted.
Critical Remote Code Execution Vulnerability Found in vm2 Sandbox Library
A critical vulnerability in vm2 may allow a remote attacker to escape the sandbox and execute arbitrary code on the host.
A highly popular JavaScript sandbox library with more than 16 million monthly downloads, vm2 supports the execution of untrusted code synchronously in a single process.
Threat Modeling Firm IriusRisk Raises $29 Million
Android Security Updates Patch Critical Vulnerabilities
The October 2022 security updates for Android started rolling out last week with patches for roughly 50 vulnerabilities, including a critical-severity flaw in the Framework component.
