The U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Coast Guard Cyber Command (CGCYBER) have sounded the alarm over in-the-wild attacks targeting a recently disclosed vulnerability in Zoho’s ManageEngine ADSelfService Plus product.
Source: Read More (SecurityWeek RSS Feed)
Microsoft said on Tuesday that a recently patched SolarWinds Serv-U zero-day vulnerability has been exploited by a Chinese threat group. read more Source: Read More (SecurityWeek RSS Feed)
Law enforcement has seized the servers and customer logs for DoubleVPN, a double-encryption service commonly used by threat actors to evade detection while performing malicious activities. […] Source: Read More (BleepingComputer)
Google wants to bring “salsa” to drive enforcement at the software supply chain security party. read more Source: Read More (SecurityWeek RSS Feed)