cisa

IndependentKrebs

CISA Order Highlights Persistent Risk at Network Edge

Credit to Author: BrianKrebs| Date: Thu, 15 Jun 2023 15:40:09 +0000

The U.S. government agency in charge of improving the nation’s cybersecurity posture is ordering all federal civilian agencies to take new measures to restrict access to Internet-exposed networking equipment. The directive comes amid a surge in attacks targeting previously unknown vulnerabilities in widely used security and networking appliances.

Read More
MalwareBytesSecurity

Update now! Ruckus vulnerability added to CISA’s list of actively exploited bugs

Categories: Exploits and vulnerabilities

Categories: News

Tags: Ruckus

Tags: CISA

Tags: AndoryuBot

Tags: CVE-2023-25717

Tags: 163.123.142.146

CISA has added a Ruckus vulnerability being abused by the AndoryuBot botnet to its catalog.

(Read more…)

The post Update now! Ruckus vulnerability added to CISA’s list of actively exploited bugs appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

Oracle WebLogic Server vulnerability added to CISA list as “known to be exploited”

Categories: Exploits and vulnerabilities

Categories: News

Tags: Oracle

Tags: WebLogic

Tags: CVE-2023-21839

Tags: CVE-2023-1389

Tags: CVE-2021-45046

Tags: CISA

Tags: reverse shell

An easy to exploit vulnerability in Oracle WebLogic Server has been added to the CISA list of things you really, really need to patch.

(Read more…)

The post Oracle WebLogic Server vulnerability added to CISA list as “known to be exploited” appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

Pre-ransomware notifications are paying off right from the bat

Categories: News

Categories: Ransomware

Tags: pre-ransomware notifications

Tags: JCDC

Tags: CISA

Tags: ransomware

Tags: IRS

Tags: Emotet

Tags: MDR

CISA has published the first results of its pre-ransomware notifications that were introduced at the start of 2023. And they appear to be working.

(Read more…)

The post Pre-ransomware notifications are paying off right from the bat appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

GoAnywhere zero-day opened door to Clop ransomware

Categories: News

Categories: Ransomware

Tags: Clop

Tags: Clop ransomware

Tags: ransomware

Tags: GoAnywhere

Tags: managed file transfer

Tags: MFT

Tags: Fortra

Tags: CISA

Tags: Known Exploited Vulnerabilities Catalog

The Clop ransomware gang has claimed responsibility for a wave of attacks that exploited a zero-day in GoAnywhere MFT admin consoles.

(Read more…)

The post GoAnywhere zero-day opened door to Clop ransomware appeared first on Malwarebytes Labs.

Read More