Cybersecurity Dive

Critical PHP vulnerabilities expose most websites to potential compromise

The serious flaws in popular website software prompted government agencies to urge organizations to take their sites offline ...
cybersecuritydive

FBI, CISA warn that SafePay ransomware poses threat to critical infrastructure

The FBI and the Cybersecurity and Infrastructure Security Agency warned that SafePay has expanded its attacks against critical infrastructure providers to become one of the world’s most active ...
Cybersecurity Dive

Hybrid mesh firewalls: Distributed security enforcement for a self-driving network

Can traditional firewalls keep up with today's distributed enterprise? Discover how hybrid mesh firewalls close security gaps ...
Cybersecurity Dive

ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users

Huntress, a Maryland-based managed security platform, said a compromised user credential for ConnectWise Cloud Backup was ...
Cybersecurity Dive

Ransomware groups expand targeting of Palo Alto Networks vulnerability

Palo Alto Networks researchers warned that ransomware operators have stepped up exploitation of a high-severity flaw in the company’s GlobalProtect portal, months after it was first disclosed.  The ...
Cybersecurity Dive

Russia-linked hackers broke into NATO shipbuilder in latest espionage campaign

While security experts have observed APT28 using Hookedge in the past, the latest campaign against NATO targets is notable ...
Cybersecurity Dive

Weak encryption certificates could have let hackers easily spoof websites

There is no evidence that hackers generated any fraudulent website certificates by exploiting the weaknesses in eMudhra’s keys. Naveen Kumar, an employee at eMudhra, said in a post on a Mozilla forum ...
cybersecuritydive

Boards confident on cybersecurity, AI oversight, but tech changes outpace readiness

Corporate boards of directors report mixed levels of readiness to oversee their companies’ cybersecurity defenses, suggesting trouble ahead as AI continues to upend the threat landscape. Most ...
cybersecuritydive

China-nexus actor linked to attack on ConnectWise Cloud Backup

Security researchers have linked a China-nexus threat group to the supply-chain attack that abused ConnectWise Cloud Backup against Microsoft 365 tenants. The state-aligned group, tracked as ...