ONSEC: Boutique Penetration Testing Agency

Sign in Subscribe

ONSEC.io Research Team

ONSEC.io Research Team

Cyber Daily 12/18: Rhode Island's Unaddressed Cybersecurity Warning, Apache Struts and Cleo Software Exploited, Hitachi Energy and BeyondTrust Patch Critical Vulnerabilities

Cyber Daily 12/18: Rhode Island's Unaddressed Cybersecurity Warning, Apache Struts and Cleo Software Exploited, Hitachi Energy and BeyondTrust Patch Critical Vulnerabilities

Good morning, ONSEC Cyber Daily readers! Today's issue is packed with critical updates and alerts you need to know. We start off in Rhode Island, where the state's social service and healthcare technology infrastructure is under attack by cybercriminals. Despite the Auditor General's repeated

Cyber Daily 12/17: Rising Tech Outages, CISA's 2024 Review, Windows Kernel Vulnerability, Adobe & Windows Exploits, HiatusRAT Attacks, Cleo & DrayTek Vulnerabilities, CISA & EPA Guidelines, Cross Apple-Android Texting Warning

Cyber Daily 12/17: Rising Tech Outages, CISA's 2024 Review, Windows Kernel Vulnerability, Adobe & Windows Exploits, HiatusRAT Attacks, Cleo & DrayTek Vulnerabilities, CISA & EPA Guidelines, Cross Apple-Android Texting Warning

Welcome to the ONSEC Cyber Daily newsletter for December 17th. Today, we're diving into the escalating wave of tech outages and cybercrime losses, as reported by Macleans and Cybersecurity Ventures. We'll also explore North Korea's cyberattack strategies, Iran's advancing cyber capabilities, and

Cyber Daily 12/16: DrayTek Vulnerabilities Impact Hundreds, CISA and EPA Shield Water Systems, Cross-Platform Texting Warning, Medical Imaging RCE Alert, Android Chrome Security Alert, Clop Ransomware Hits Cleo, NoviSpy Exploits Qualcomm Bugs

Cyber Daily 12/16: DrayTek Vulnerabilities Impact Hundreds, CISA and EPA Shield Water Systems, Cross-Platform Texting Warning, Medical Imaging RCE Alert, Android Chrome Security Alert, Clop Ransomware Hits Cleo, NoviSpy Exploits Qualcomm Bugs

Welcome to today's issue of ONSEC Cyber Daily, where we bring you the most impactful cybersecurity news in a digestible format. In today's headlines, hundreds of organizations have fallen victim to cyberattacks exploiting undocumented vulnerabilities in DrayTek. The cybersecurity vendor Forescout has issued a warning about

Cyber Daily 12/14: CISA Warns of Cleo, CyberPanel Exploits; Samsung, Apple Patch Critical CVEs; Ransomware Gangs Target RDP Services; Podcasts Discuss Cybersecurity Trends

Cyber Daily 12/14: CISA Warns of Cleo, CyberPanel Exploits; Samsung, Apple Patch Critical CVEs; Ransomware Gangs Target RDP Services; Podcasts Discuss Cybersecurity Trends

Welcome to today's issue of ONSEC Cyber Daily! We're diving into a whirlwind of cyber threats and security patches. The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about ransomware gangs exploiting the Cleo 0-Day vulnerability, a situation reminiscent of the MOVEit hack campaign.

Cyber Daily 12/13: Dell and Citrix Under Attack, Microsoft's Early Christmas Gift, Water Treatment Facilities at Risk

Cyber Daily 12/13: Dell and Citrix Under Attack, Microsoft's Early Christmas Gift, Water Treatment Facilities at Risk

Welcome to the ONSEC Cyber Daily, your one-stop source for the latest in cybersecurity news. Today, we're diving into the critical Dell security vulnerabilities that are compromising affected systems. We'll hear from Varshini, a cybersecurity expert, on the importance of staying ahead of emerging threats. We&

Cyber Daily 12/12: Water Treatment Facilities at Risk, Windows 0Day Attack, China Denies Telco Attacks, WordPress Plugin Flaw, Microsoft's Patch Tuesday

Cyber Daily 12/12: Water Treatment Facilities at Risk, Windows 0Day Attack, China Denies Telco Attacks, WordPress Plugin Flaw, Microsoft's Patch Tuesday

Welcome to the ONSEC Cyber Daily for December 12th. Today, we're diving into a chilling tale of cyberattacks on water treatment facilities, revealing how a cyberattacker tried to poison a Florida city's water supply by remotely accessing internal systems. We're also discussing the new

Cyber Daily 12/11: iCloud Data Vulnerability, Cleo Software Exploits, Dell Power Manager Flaw, QNAP NAS Risks, Patch Tuesday Highlights

Cyber Daily 12/11: iCloud Data Vulnerability, Cleo Software Exploits, Dell Power Manager Flaw, QNAP NAS Risks, Patch Tuesday Highlights

Welcome to today's issue of ONSEC Cyber Daily! We're diving into a series of vulnerabilities that have been making waves in the cybersecurity world. First up, we're looking at a flaw in the TCC iOS Subsystem that's leaving iCloud data exposed to