Ivanti has disclosed a critical security vulnerability impacting its Cloud Service Appliance (CSA), which has been detected as actively exploited in the wild. The vulnerability, designated as CVE-2024-8963, holds a high CVSS score of 9.4 out of 10, indicating its severity. It was inadvertently addressed in CSA versions 4.6 Patch…
Ransomware Attack Halts Colonial Pipeline Operations, Highlighting Cybersecurity Vulnerabilities On Saturday, Colonial Pipeline, a crucial provider transporting approximately 45% of the fuel consumed on the U.S. East Coast, officially announced it has suspended operations due to a ransomware attack. This incident underscores the susceptibility of critical infrastructure to cyber threats.…
In a significant cybersecurity incident, the Colonial Pipeline, a crucial fuel pipeline operator in the United States, fell victim to a ransomware attack that has led to a regional emergency declaration from the U.S. Federal Motor Carrier Safety Administration (FMCSA). This declaration affects 17 states and the District of Columbia,…
Cybersecurity experts have issued alerts regarding ongoing exploitation attempts surrounding a recently identified vulnerability in Synacor’s Zimbra Collaboration software. Enterprise security firm Proofpoint detected malicious activity linked to this flaw beginning on September 28, 2024. The targeted vulnerability, tracked as CVE-2024-45519, is a critical security issue within Zimbra’s postjournal service,…
U.S. Congressional Budget Office Suffers Cybersecurity Breach Amid Ongoing Government Shutdown In an alarming turn of events during a prolonged government shutdown lasting over five weeks, the U.S. Congressional Budget Office (CBO) disclosed that it recently experienced a cybersecurity breach attributed to a suspected foreign actor. The CBO, which is…
Government, Industry Specific CISA Asserts Fired Workers Do Not Qualify for Union Protections Chris Riotta (@chrisriotta) • November 6, 2025 The Cybersecurity and Infrastructure Security Agency (CISA) has informed a federal judge that it is adhering to a court order that prohibits layoffs during the ongoing government shutdown. This comes…
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding malicious actors exploiting unencrypted persistent cookies from the F5 BIG-IP Local Traffic Manager (LTM) module for reconnaissance within target networks. This technique enables attackers to identify additional non-internet-facing devices, raising significant concerns about potential vulnerabilities in those systems.…
A suspected nation-state actor has been detected exploiting three critical vulnerabilities in the Ivanti Cloud Service Appliance (CSA), leveraging these zero-day flaws to conduct a series of targeted cyberattacks. According to Fortinet’s FortiGuard Labs, these vulnerabilities allowed attackers to gain unauthorized access to the CSA, enumerate users, and access their…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Tuesday the addition of a serious vulnerability affecting SolarWinds Web Help Desk (WHD) software to its Known Exploited Vulnerabilities (KEV) catalog. This decision comes amid indications of active exploitation of the flaw. Identified as CVE-2024-28987, this vulnerability has been assigned…
