Page 10 - Shadowserver Foundation News Today

Exploits from Zyxel Firewall’s CVE-2022-30525 vulnerability are still increasing despite patches being available.

IoT botnets are not new. Nor are DDoS attacks. But the two are on a trajectory that is raising the stakes in DDoS protection and bot takeover prevention.

Beginning in mid-February 2022, security researchers, network operators, and security vendors observed a spike in DDoS attacks sourced from UDP port 10074 targeting broadband access ISPs, financial institutions, logistics companies, and organizations in other vertical markets. Upon further investigation, it was determined that the devices abused to launch these attacks are MiCollab and MiVoice Business […]

DDoS flaw has already been used in the wild, researchers are saying.

The main goals of Nonprofit Cyber are to improve broader coordination within the nonprofit sector, give greater reach to the specific expertise each organization brings and provide a unified signal to the public about some of the best cybersecurity practices or resources available.

Founder members of the Nonprofit Cyber coalition pledge to enhance joint action on cyber security around the world

The Shadowserver Foundation has started conducting daily scans in an effort to identify exposed ICS and help organizations reduce exposure.

Nonprofit Cyber says its goal is 'joint action to improve cybersecurity' not political lobbying.

By Eduard Kovacs on June 09, 2021 Cisco’s Smart Install protocol is still being abused in attacks — five years after the networking giant issued its first warning — and there are still roughly 18,000 internet-exposed devices that could be targeted by hackers. Cisco describes Smart Install as a plug-and-play configuration and image-management feature that provides zero-touch deployment for new switches. Smart Install can be very useful for organizations, but it can also pose a serious sec...

BankInfoSecurity May 5, 2021 Twitter Get Permission It has been an open question as to how a half-dozen hacking groups began exploiting Exchange servers in an automated fashion in the days leading up to Microsofts patches. But there are strong signs that exploit code leaked, and the question now is: Who leaked it? A Taiwanese computer security researcher indicated on Friday that exploit code he developed and privately shared with Microsoft in early January ended up in hostile hands. Its an ...