Collecting Cyber-News from over 60 sources

Tag: cisa

Cybersecurity Snapshot: SANS Recommends Six Controls To Secure AI Systems, While NCSC Warns About Outdated API Security Methods

Apr 4, 2025 6:42 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, ai, api, attack, authentication, best-practice, botnet, business, cisa, cloud, compliance, computer, control, credentials, cryptography, cyber, cyberattack, cybersecurity, data, detection, dns, endpoint, framework, governance, government, incident response, infrastructure, injection, intelligence, Internet, least-privilege, malicious, mitigation, monitoring, network, phishing, privacy, programming, regulation, resilience, risk, risk-management, sans, service, strategy, supply-chain, threat, training, unauthorized, update, zero-trust

Check out the security controls that SANS Institute says are essential for protecting your AI systems. Plus, the U.K. NCSC urges organizations to adopt newer API security techniques. In addition, CISA and other cyber agencies warn that attackers are using “fast flux” techniques to conceal their actions. And much more! Dive into five things that…
Cybersecurity Snapshot: SANS Recommends Six Controls To Secure AI Systems, While NCSC Warns About Outdated API Security Methods

Apr 4, 2025 5:42 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, ai, api, attack, authentication, best-practice, botnet, business, cisa, cloud, compliance, computer, control, credentials, cryptography, cyber, cyberattack, cybersecurity, data, detection, dns, endpoint, framework, governance, government, incident response, infrastructure, injection, intelligence, Internet, least-privilege, malicious, mitigation, monitoring, network, phishing, privacy, programming, regulation, resilience, risk, risk-management, sans, service, strategy, supply-chain, threat, training, unauthorized, update, zero-trust

Check out the security controls that SANS Institute says are essential for protecting your AI systems. Plus, the U.K. NCSC urges organizations to adopt newer API security techniques. In addition, CISA and other cyber agencies warn that attackers are using “fast flux” techniques to conceal their actions. And much more! Dive into five things that…
CISA Layoffs Are a Momentary Disruption, Not a Threat

Apr 4, 2025 5:42 PM

by

Andy Stern

in SecurityNews

Tags: cisa, cyber, cybersecurity, jobs, threat

Layoffs may cause short-term disruptions, but they don’t represent a catastrophic loss of cybersecurity capability, because the true cyber operations never resided solely within CISA to begin with. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/cisa-layoffs-momentary-disruption-not-threat
Longtime ‘Fast Flux’ Evasion Technique Now a National Security Threat

Apr 4, 2025 3:42 PM

by

Andy Stern

in SecurityNews

Tags: advisory, cisa, detection, infrastructure, ransomware, threat

CISA, the FBI, and NSA issued an advisory about the national security threat posed by “fast flux,” a technique used by threat actors to evade detection of their C2 infrastructures that has been around for two decades but has seen a resurgence in use by ransomware gangs and nation-state bad actors. First seen on securityboulevard.com…
For flux sake: CISA, annexable allies warn of hot DNS threat

Apr 4, 2025 5:42 AM

by

Andy Stern

in SecurityNews

Tags: cisa, dns, threat

Shape shifting technique described as menace to national security First seen on theregister.com Jump to article: www.theregister.com/2025/04/03/cisa_and_annexable_allies_warn/
Flux off: CISA, annexable allies warn of hot DNS threat

Apr 4, 2025 1:42 AM

by

Andy Stern

in SecurityNews

Tags: cisa, dns, threat

Shape shifting technique described as menace to national security First seen on theregister.com Jump to article: www.theregister.com/2025/04/03/cisa_and_annexable_allies_warn/
CISA warns of critical flaws in industrial control systems

Apr 3, 2025 11:42 PM

by

Andy Stern

in SecurityNews

Tags: cisa, control, flaw

First seen on scworld.com Jump to article: www.scworld.com/news/cisa-warns-of-critical-flaws-in-industrial-control-systems
CISA warns of Fast Flux DNS evasion used by cybercrime gangs

Apr 3, 2025 10:42 PM

by

Andy Stern

in SecurityNews

Tags: cisa, cybercrime, cybersecurity, dns, international, ransomware, threat

CISA, the FBI, the NSA, and international cybersecurity agencies are calling on organizations and DNS providers to mitigate the “Fast Flux” cybercrime evasion technique used by state-sponsored threat actors and ransomware gangs. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-fast-flux-dns-evasion-used-by-cybercrime-gangs/
Cisco confirms cyberattacks on Smart Licensing Utility flaw

Apr 3, 2025 7:42 PM

by

Andy Stern

in SecurityNews

Tags: cisa, cisco, credentials, cve, cyberattack, exploit, flaw, kev, vulnerability

CISA earlier this week added CVE-2024-20439, a static credential vulnerability in the license management app, to its known exploited vulnerabilities catalog. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisco-confirms-attacks-smart-licensing-utility-vulnerability/744352/
Cisco confirms cyberattacks on Smart Licensing Utility flaw

Apr 3, 2025 6:42 PM

by

Andy Stern

in SecurityNews

Tags: cisa, cisco, credentials, cve, cyberattack, exploit, flaw, kev, vulnerability

CISA earlier this week added CVE-2024-20439, a static credential vulnerability in the Cisco Smart Licensing Utility, to its known exploited vulnerabilities catalog. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisco-confirms-attacks-smart-licensing-utility-vulnerability/744352/
Attackers are leveraging Cisco Smart Licensing Utility static admin credentials (CVE-2024-20439)

Apr 3, 2025 3:42 PM

by

Andy Stern

in SecurityNews

Tags: cisa, cisco, credentials, cve, exploit, vulnerability

CVE-2024-20439, a static credential vulnerability in the Cisco Smart Licensing Utility, is being exploited by attackers in the wild, CISA has confirmed on Monday by adding the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/03/attackers-are-leveraging-cisco-smart-licensing-utility-static-admin-credentials-cve-2024-20439/
CISA’s Latest Advisories Expose High-Risk Vulnerabilities in Industrial Control Systems

Apr 3, 2025 1:42 PM

by

Andy Stern

in SecurityNews

Tags: cisa, control, cybersecurity, infrastructure, mitigation, risk, threat, vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) issued two crucial Industrial Control Systems (ICS) advisories, highlighting vulnerabilities that could have serious impacts on critical infrastructure. These ICS advisories, identified as ICSA-25-091-01 and ICSA-24-331-04, are designed to inform organizations about current security threats, vulnerabilities, and necessary mitigations related to ICS products and systems. First seen on…
Don’t cut CISA personnel, House panel leaders say, as they plan legislation giving the agency more to do

Apr 3, 2025 1:42 AM

by

Andy Stern

in SecurityNews

Tags: cisa, law, threat

Reps. Andrew Garbarino and Eric Swalwell said legislative priorities include an expiring information-sharing law and making a threat information-sharing organization permanent. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-workforce-cuts-house-leaders-legislation/
Latest Ivanti bug, paired with malware, earns an alert from CISA

Apr 2, 2025 8:56 PM

by

Andy Stern

in SecurityNews

Tags: china, cisa, hacker, ivanti, malware, vulnerability

A recent alert from CISA builds on previous research about a vulnerability in Ivanti products that China-linked hackers have used to insert malware into networks. First seen on therecord.media Jump to article: therecord.media/cisa-alert-ivanti-bug-resurge-malware
U.S. CISA adds Apache Tomcat flaw to its Known Exploited Vulnerabilities catalog

Apr 2, 2025 4:56 PM

by

Andy Stern

in SecurityNews

Tags: apache, cisa, cve, cybersecurity, exploit, flaw, infrastructure, kev, vulnerability

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apache Tomcat flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Apache Tomcat path equivalence vulnerability, tracked as CVE-2025-24813, to its Known Exploited Vulnerabilities (KEV) catalog. The Apache Tomcat vulnerability CVE-2025-24813 was recently disclosed and is being actively exploited just 30…
Malicious actors increasingly put privileged identity access to work across attack chains

Apr 2, 2025 12:55 PM

by

Andy Stern

in SecurityNews

Tags: access, ai, api, apt, attack, authentication, best-practice, breach, cisa, cisco, cloud, corporate, credentials, cybercrime, cyberespionage, data, detection, email, endpoint, exploit, framework, group, healthcare, identity, infrastructure, login, malicious, malware, mfa, microsoft, network, open-source, password, phishing, phone, ransomware, service, social-engineering, strategy, threat, tool, vpn, windows

Lateral movement: Leveraging privileged access to act in plain sight: Once situated on the corporate network, compromised credentials also allow attackers to expand access to other internal systems with a reduced likelihood of being discovered or triggering malware detection.According to Talos, nearly half of investigated identity attacks targeted Active Directory, with another 20% targeting cloud…
CISA Alerts on Active Exploitation of Apache Tomcat Vulnerability

Apr 2, 2025 7:55 AM

by

Andy Stern

in SecurityNews

Tags: apache, cisa, cve, cyber, cybersecurity, exploit, flaw, infrastructure, open-source, risk, vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert regarding the active exploitation of CVE-2025-24813, a critical vulnerability within Apache Tomcat. This newly identified flaw poses a significant risk to organizations using affected versions of the popular open-source web server. CVE-2025-24813: Apache Tomcat Path Equivalence Vulnerability CVE-2025-24813, classified as a >>Path Equivalence…
Wiz’s Security GraphDB vs. DeepTempo’s LogLM

Apr 2, 2025 12:55 AM

by

Andy Stern

in SecurityNews

Tags: access, ai, api, attack, automation, best-practice, breach, business, cisa, cloud, container, credentials, cve, cybersecurity, data, data-breach, defense, detection, exploit, flaw, framework, guide, iam, identity, infrastructure, intelligence, Internet, jobs, kev, leak, LLM, login, malicious, mitre, ml, network, phishing, risk, social-engineering, strategy, technology, threat, tool, update, vulnerability, vulnerability-management, zero-day

How can a friendly Eye of Sauron help the Wizards? Cloud security is evolving beyond silos. Wiz’s meteoric rise has been powered by a fresh approach: an agentless, graph-based view of risk context across the cloud stack that supplanted a number of point solutions and created the Cloud-Native Application Protection Platform category (CNAPP). If you want…
As CISA Downsizes, Where Can Enterprises Get Support?

Apr 1, 2025 11:56 PM

by

Andy Stern

in SecurityNews

Tags: cisa, cybersecurity, incident response, threat

In this roundtable, cybersecurity experts, including two former CISA executives, weigh in on alternate sources for threat intel, incident response, and other essential cybersecurity services. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/roundtable-cisa-downsizes-where-can-enterprises-look-support
Updated CISA vulnerabilities list includes Cisco Smart Licensing Utility bug

Apr 1, 2025 9:55 PM

by

Andy Stern

in SecurityNews

Tags: cisa, cisco, vulnerability

First seen on scworld.com Jump to article: www.scworld.com/brief/updated-cisa-vulnerabilities-list-includes-cisco-smart-licensing-utility-bug
CISA spots spawn of Spawn malware targeting Ivanti flaw

Apr 1, 2025 11:36 AM

by

Andy Stern

in SecurityNews

Tags: apt, cisa, flaw, Hardware, ivanti, malware

Resurge an apt name for malware targeting hardware maker that has security bug after security bug First seen on theregister.com Jump to article: www.theregister.com/2025/04/01/cisa_ivanti_warning/
CISA Warns of Cisco Smart Licensing Utility Credential Flaw Exploited in Attacks

Apr 1, 2025 11:36 AM

by

Andy Stern

in SecurityNews

Tags: advisory, attack, cisa, cisco, credentials, cve, cyber, cybersecurity, exploit, flaw, infrastructure, software, vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a security advisory warning organizations about a critical vulnerability in Cisco’s Smart Licensing Utility (SLU) software that has reportedly been exploited in cyberattacks. The vulnerability, assigned CVE-2024-20439, stems from a static credential issue that could leave affected systems open to remote exploitation with potentially devastating consequences.…
Fixed Ivanti Bug Used by Novel RESURGE Malware

Mar 31, 2025 11:19 PM

by

Andy Stern

in SecurityNews

Tags: cisa, ivanti, malware

First seen on scworld.com Jump to article: www.scworld.com/brief/cisa-fixed-ivanti-bug-used-by-novel-resurge-malware
Experts: Integrity of US elections at risk due to decreased CISA funding

Mar 31, 2025 11:19 PM

by

Andy Stern

in SecurityNews

Tags: cisa, election, risk

First seen on scworld.com Jump to article: www.scworld.com/brief/experts-integrity-of-us-elections-at-risk-due-to-decreased-cisa-funding
Addressed Ivanti bug leveraged by novel RESURGE malware

Mar 31, 2025 11:19 PM

by

Andy Stern

in SecurityNews

Tags: cisa, ivanti, malware

First seen on scworld.com Jump to article: www.scworld.com/brief/cisa-addressed-ivanti-bug-leveraged-by-novel-resurge-malware
U.S. CISA adds Cisco Smart Licensing Utility flaw to its Known Exploited Vulnerabilities catalog

Mar 31, 2025 11:19 PM

by

Andy Stern

in SecurityNews

Tags: cisa, cisco, cve, cybersecurity, exploit, flaw, infrastructure, kev, vulnerability

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco Smart Licensing Utility flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco Smart Licensing Utility vulnerability, tracked as CVE-2024-20439, to its Known Exploited Vulnerabilities (KEV) catalog. Last week, Cisco disclosed two vulnerabilities in its Smart Licensing Utility: CVE-2024-20439,…
CISA Warns of Resurge Malware Connected to Ivanti Vuln

Mar 31, 2025 10:19 PM

by

Andy Stern

in SecurityNews

Tags: cisa, exploit, ivanti, malware, threat, vulnerability

Threat actors are exploiting a vulnerability in Ivanti Connect Secure first disclosed by the vendor in January. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/cisa-warns-resurge-malware-ivanti-vuln
Rootkit, Backdoor and Tunneler: Ivanti Malware Does It All

Mar 31, 2025 8:19 PM

by

Andy Stern

in SecurityNews

Tags: backdoor, china, cisa, exploit, hacker, ivanti, malware, vpn, vulnerability

CISA Publishes Anatomy of Advanced Ivanti VPN Malware. Hackers using Trojans connected to a malware family deployed by Chinese nation-state hackers are actively exploiting a now-patched vulnerability in Ivanti Connect Secure appliances. The malware contains capabilities of a rootkit, dropper, backdoor, bootkit, proxy and tunneler. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/rootkit-backdoor-tunneler-ivanti-malware-does-all-a-27881
CISA warns new malware targeting Ivanti zero-day vulnerability

Mar 31, 2025 6:20 PM

by

Andy Stern

in SecurityNews

Tags: cisa, cve, ivanti, malware, vulnerability, zero-day

CVE-2025-0282, a critical vulnerability that affects Ivanti’s Connect Secure, Policy Secure;and ZTA Gateway products, was disclosed and patched in January. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-warns-malware-targeting-ivanti-zero-day/743967/
New Malware Variant RESURGE Exploits Ivanti Vulnerability

Mar 31, 2025 6:20 PM

by

Andy Stern

in SecurityNews

Tags: cisa, cve, exploit, ivanti, malware, vulnerability

CISA recommends immediate action to address malware variant RESURGE exploiting Ivanti vulnerability CVE-2025-0282 First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/malware-resurge-exploits-ivanti/