Cybersecurity Dive
Threat groups exploit resurgent vulnerabilities
Threat actors are increasingly exploiting resurgent vulnerabilities—older CVEs that re-emerge years after disclosure—due to their ease of weaponization and lack of monitoring.
Critical Vulnerability in CrushFTP File Transfer Software Under Attack
According to a report from Shadowserver, the majority of exploitation attempts originate from IP addresses in Asia, with a small number coming from Europe and North America.
Report: 82% of K-12 Schools Recently Experienced a Cyber Incident
A startling majority — 82% — of K-12 schools experienced a cyber incident between July 2023 and December 2024, according to a report released Thursday by the nonprofit Center for Internet Security.
President Trump Nominates Sean Plankey to Lead CISA
President Trump has named Sean Plankey to become the director of the CISA. Plankey previously held key roles at the Department of Energy and National Security Council during the first Trump administration.
Massive Iran-Linked Botnet Launches DDoS Attacks Against Telecom, Gaming Platforms
A massive botnet comprising more than 30,000 hacked security cameras and network video recorders is being used to launch DDoS attacks against telecom providers and gaming platforms, as per researchers from Nokia Deepfield and GreyNoise.
MS-ISAC Says Critical Infrastructure at State, Local Levels at Heightened Risk of Cyberattacks
State and local communities are facing a rise in cyber threats from nation-state-linked and criminal threat groups, which in many cases are looking to undermine confidence in public institutions, according to a report by the MS-ISAC.
CISA Taps Karen Evans as Executive Assistant Director for Cybersecurity
Karen Evans, who first joined CISA in January as a senior adviser, will be responsible for leading the agency’s cybersecurity efforts as the national coordinator for critical infrastructure security and resilience.
Attackers Exploiting Cisco Vulnerabilities Tied to Salt Typhoon Campaign
GreyNoise researchers observed active exploitation of two Cisco vulnerabilities, CVE-2018-0171 and CVE-2023-20198, which reportedly have been used in recent attacks by the Chinese nation-state threat group known as Salt Typhoon.
Proof-of-Concept Exploit Released for Four Ivanti Vulnerabilities
Horizon3.ai researchers on Wednesday released technical details and a proof-of-concept (PoC) exploit for four critical Ivanti vulnerabilities that were first disclosed and patched last month.
Ransomware Gangs Shifting Tactics to Evade Enterprise Defenses
In 75% of the ransomware incidents Huntress observed in 2024, threat actors used remote access Trojans (RATs), while 17.3% of attacks featured abused of remote monitoring and management tools like ConnectWise ScreenConnect, TeamViewer and LogMeIn.
Defend Against Threats with Cyber Fusion
Cyware is the leading provider of cyber fusion solutions that power threat intelligence sharing , end-to-end automation and 360-degree threat response.
Learn More
Trending Tags
