Tag cybersecurity

CISA Calls on Agencies to Address Critical “Array Networks” Vulnerability as Attacks Escalate

On Monday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) included a recently patched critical vulnerability affecting Array Networks AG and vxAG secure access gateways in its Known Exploited Vulnerabilities (KEV) catalog. This addition follows credible reports indicating active exploitation of the flaw in real-world scenarios. The vulnerability, designated as…

Read MoreCISA Calls on Agencies to Address Critical “Array Networks” Vulnerability as Attacks Escalate

HHS Watchdog Identifies IT Security Vulnerabilities in Medicaid Across Several States

Governance & Risk Management , Healthcare , Industry Specific Penetration Testing Reveals Vulnerabilities in State Medicaid Systems Marianne Kolbasuk McGee (HealthInfoSec) • October 21, 2025 HHS OIG’s penetration testing of ten state Medicaid systems highlighted critical security gaps that must be addressed to safeguard data from advanced cyber threats. (Image:…

Read MoreHHS Watchdog Identifies IT Security Vulnerabilities in Medicaid Across Several States

Insights from the Massive AWS Outage on the State of the Internet

A significant outage affecting Amazon Web Services’ US-EAST-1 region, located in northern Virginia, resulted in extensive disruptions to numerous websites and online platforms globally on Monday morning. Amazon’s primary e-commerce site, alongside services such as Ring doorbells and the Alexa smart assistant, experienced substantial interruptions. Other affected platforms included Meta’s…

Read MoreInsights from the Massive AWS Outage on the State of the Internet

Cybersecurity Agencies Issue Warning on IDOR Vulnerabilities Used in Data Breaches

Recent advisories issued by cybersecurity agencies in both Australia and the United States have exposed critical vulnerabilities present in web applications that could be exploited by cybercriminals, risking data breaches and the theft of sensitive information. The joint advisory particularly underscores the threat posed by Insecure Direct Object Reference (IDOR)…

Read MoreCybersecurity Agencies Issue Warning on IDOR Vulnerabilities Used in Data Breaches

Dodo and IPrimus Data Breach: Over 1,600 Accounts Compromised

Cybersecurity Incident: Data Breach at Australian Telecom Providers Dodo and iPrimus A significant data breach has impacted two prominent Australian telecommunications companies, Dodo and iPrimus, resulting in the exposure of over 1,600 customer accounts. This cyberattack, which targeted their email systems, has raised substantial concerns regarding the security of personal…

Read MoreDodo and IPrimus Data Breach: Over 1,600 Accounts Compromised

Enigmatic Team Bangladesh Launches DDoS Attacks and Data Breaches Against India

A hacktivist collective named Mysterious Team Bangladesh has been implicated in over 750 distributed denial-of-service (DDoS) attacks, alongside 78 instances of website defacement, since June 2022. According to a report by Group-IB, a cybersecurity firm based in Singapore, this group primarily targets organizations in the logistics, government, and financial sectors…

Read MoreEnigmatic Team Bangladesh Launches DDoS Attacks and Data Breaches Against India

APIs: Unmasking the Hidden Threat to Cybersecurity Across Industries

Introduction In an age where digital connectivity is paramount, Application Programming Interfaces (APIs) have emerged as crucial facilitators for communication and data exchange among software applications. Acting as bridges, APIs enable various systems to share information seamlessly. However, with the rising adoption of APIs comes an increased risk, as they…

Read MoreAPIs: Unmasking the Hidden Threat to Cybersecurity Across Industries