darkreading.com

CISA has issued an emergency directive in response to Midnight Blizzard, or Cozy Bear, a Russian threat actor targeting Microsoft email accounts. The group is extracting information to access Microsoft customer systems. Strict security measures, including strong passwords and multi-factor authentication, are strongly recommended...

No exploitations have been observed in the wild as of yet, according to the company’s European site, but owners should scan for indicators of compromise given that the bugs have been publicly known but unpatched for months....

Several Cisco products, including IOS, IOS XE, and AP software, need patching against various high-risk security vulnerabilities.

American Express is alerting customers of a data breach through a third-party service provider affecting credit card details. The breach, external to American Express systems, compromised card numbers, names, and expiration dates. Customers are advised to monitor their accounts for fraud and use the American Express Mobile app...

Since the beginning of this year, the company has disclosed some seven critical bugs so far, almost all of which attackers have quickly exploited in mass attacks.

Organizations running Linux distributions need to prepare to defend their systems against ransomware attacks. Steps to ensure resiliency and basics such as access control reduce major disruptions.

A survey of cybercrime experts assessing the top cybercrime-producing nations results in some expected leaders — Russia, Ukraine, and China — but also some surprises.

CVE-2024-1580 allows remote attackers to execute arbitrary code on affected devices.

Nothing fancy or new on this article, but the basics should prevent tears:...

cross-posted from: infosec.pub/post/8070199...