Multiple Flaws Affecting Realtek Wi-Fi SDKs Impact Nearly a Million IoT Devices

A cyberespionage group that appears to be based in China has been seen targeting critical infrastructure organizations in Southeast Asia, and the attackers may be interested in industrial control systems (ICS). It’s not uncommon for Chinese threat actors to target Southeast Asia. Over the past years, they have been observed targeting organizations in the military,…

On Monday, cybersecurity researchers connected a series of attacks targeting Accellion File Transfer Appliance (FTA) servers over the past two months to a data breach and extortion campaign orchestrated by the UNC2546 cybercrime group. Threat actors targeted up to 100 companies using Accellion’s FTA and stole sensitive files by combining multiple zero-day vulnerabilities and a…

The bipartisan leaders of two Senate committees on Thursday introduced legislation to shore up the cybersecurity of critical infrastructure after months of crippling cyberattacks. The Department of Homeland Security (DHS) Industrial Control Systems Capabilities Enhancement Act would direct the Cybersecurity and Infrastructure Security Agency (CISA) to lead efforts to understand threats against industrial control systems.  The…

MANSFIELD, Ohio – The Department of the Air Force announced yesterday it has identified Ohio’s Mansfield-Lahm Air National Guard Base as the preferred location for a new Cyber Warfare Wing mission. The transformation will support Air Combat Command’s future requirements and result in operational mission changes, including an increase of approximately 175 Airmen and associated…

WordPress has released version 5.7.1 of its popular content management system (CMS), which brings more than 25 bug fixes, including patches for two security vulnerabilities. One of the patched security flaws is an XML External Entity (XXE) vulnerability in the ID3 library in PHP 8, which is used by WordPress. Tracked as CVE-2021-29447, the vulnerability…

Cybercrime , Cybercrime as-a-service , Cyberwarfare / Nation-State Attacks Biden Administration Says Attempted Ransomware Disruption Efforts Won’t Be Immediate Mathew J. Schwartz (euroinfosec) • July 12, 2021     REvil ransom note seen by victims of the ransomware attack involving Kaseya’s software (Source: Cisco Talos) As the Biden administration attempts to force Russia to crack…