Policy Secure News Today

Multiple software and hardware products saw vulnerabilities this week, notably Ivanti, which has had continued issues the last two months.

The Shadowserver Foundation identifies thousands of Ivanti VPN instances likely impacted by a recent remote code execution flaw.

Crooks are hijacking Facebook pages to spread phoney AI applications. Welcome to Cyber Security Today. It's Monday April, 8th, 2024. I'm Howard Solomon with a roundup of the latest cybersecurity news. Cybercrooks are taking over poorly-protected Facebook profiles to spread links to fake artificial intelligence applications. That's according to researchers at Bitdefender. They say the

BleepingComputer reports that attacks leveraging a recently patched high-severity heap overflow vulnerability, tracked as CVE-2024-21894, could impact nearly 16,500 internet-exposed Ivanti Connect Secure and Poly Secure VPN gateways.

Ivanti plans to revamp core engineering and security operations to arm against frequent and evolved adversary activities.

A new ransomware gang claims 11 victims, Ivanti promises to overhaul product security, and more. Welcome to Cyber Security Today. It's Friday, April 5th, 2024. I'm Howard Solomon, contributing reporter on cybersecurity for ITWorldCanada.com and TechNewsday.com in the U.S. A new ransomware group emerged last month. Dubbed the RedCryptoApp, researchers at Netenrich say

Part of the reset involves AI-powered documentation search and call routing.

Our collection of the most relevant reporting and industry perspectives for those guiding cybersecurity strategies and focused on SecOps. Also included: Dealing with a Ramadan cyber spike; funding Internet security; and Microsoft's Azure AI changes.

So far this year, Ivanti has acknolwdged a total of 11 flaws — many of them critical — in its remote access products.

A prolific but previously hidden threat actor turns public vulnerabilities into working exploits before companies have time to patch.