Data Center Power and Cooling Systems Riddled with Security Holes
Security researchers at Claroty have dug into the firmware and network management interfaces running two pieces of critical infrastructure kit…
Security
Cybersecurity, vulnerabilities, threats, and defense
Fortinet and Ivanti Ship Emergency Patches for Critical Command Injection Bugs
Both Fortinet and Ivanti have released urgent updates addressing critical OS command injection vulnerabilities that can be exploited remotely, without…
AI Budgets Are Growing — But So Are the Identity and Data Security Risks
As organizations pour more money into AI initiatives, a familiar tension is resurfacing: how do you move fast on innovation…
ServiceNow Quietly Patches Flaw That Was Already Being Exploited Against Customers
ServiceNow has pushed out a fix for a security vulnerability that was actively being exploited against some of its hosted…
Microsoft Plugs Three Zero-Days in Patch Tuesday, Including SYSTEM Escalation Flaws
Microsoft rolled out fixes for three zero-day vulnerabilities this Patch Tuesday, two of which let attackers escalate to SYSTEM privileges…
Ivanti Sentry Flaw Gives Attackers Root Access — Patch Right Now
Ivanti has patched two critical vulnerabilities in its Sentry secure mobile gateway, including a maximum-severity bug that allows remote code…
Arista Says No Patch Coming for Actively Exploited EOS Vulnerability
Arista Networks confirmed an EOS vulnerability is under active exploitation—and then dropped the hammer: no patch is planned. Organizations are…
ServiceNow Zero-Day Used to Breach Customer Instances — Patched Silently on June 5
ServiceNow customers got unwelcome news this week: unknown threat actors actively exploited an unauthenticated flaw to gain deeper access to…
Siemens, Schneider Electric, and Phoenix Contact Ship ICS Patches — Rockwell Bolsters SecureOT
Another Patch Tuesday, another round of industrial control system fixes—and this one’s a biggie for anyone running operational technology environments….
Dashlane Brute-Force Attack Downloads Encrypted Vaults From Under 20 Users
Dashlane disclosed that attackers brute-forced 2FA protections and downloaded encrypted vaults from fewer than 20 personal plan users. The vaults are encrypted, but users with weak master passwords should change them immediately.