We saw another ransomware operation shut down this week after first getting breached by law enforcement and then targeting critical infrastructure, putting them further in the spotlight of the US government. What makes this strange is that this seems to be a common routine for the DarkSide, I mean BlackCat/ALPHV, ransomware operation which tends to…

Scans on the public web show that approximately 150,000 Fortinet FortiOS and FortiProxy secure web gateway systems are vulnerable to CVE-2024-21762, a critical security issue that allows executing code without authentication. America’s Cyber Defense Agency CISA confirmed last month that attackers are actively exploiting the flaw by adding it to its Known Exploited Vulnerabilities (KEV)…

QNAP warns of vulnerabilities in its NAS software products, including QTS, QuTS hero, QuTScloud, and myQNAPcloud, that could allow attackers to access devices. The Taiwanese Network Attached Storage (NAS) device maker disclosed three vulnerabilities that can lead to an authentication bypass, command injection, and SQL injection. While the last two require the attackers to be authenticated on…

Following next month’s terrible BlackCat malware attack, which caused widespread disruption to the US healthcare system, Optum’s Change Healthcare has begun to restore systems to normal operation. The largest American health insurance company is United Health Group ( UGG), and its subsidiary, Optum Solutions, runs the Change Healthcare system. The US’s largest settlement exchange platform…

According to Microsoft, the Soviet” Midnight Blizzard” hacking group recently used identification secrets stolen from a cyberattack in January to access some of its internal systems and resource code libraries. After launching a password-spy assault that gained access to a legacy non-production check tenant account in January, Microsoft revealed that Midnight Blizzard ( also known…