Page 3 - Shadowserver Foundation News Today

Threat actors exploit Ivanti security flaw to deploy a stealthy backdoor! Learn how CVE-2024-21893 puts your devices at risk.

This marks the third vulnerability discovered in Ivanti's Connect Secure VPN after the acknowledgment of two earlier bugs exploited by threat actors associated with China.

Also in this issue: How the SEC's reporting rules are being weaponized, quishing attacks plaguing execs, and tabletop exercises making a comeback.

Software developers are in a race against time to patch a flaw that could result in supply chain attacks, warned the integrated development environment maker

Hackers have begun mass exploiting a third vulnerability affecting Ivanti’s widely used enterprise VPN appliance.

Hackers have begun mass exploiting a third vulnerability affecting Ivanti’s widely used enterprise VPN appliance, new public data shows. Last week, Ivanti said it had discovered two new security flaws — tracked as CVE-2024-21888 and CVE-2024-21893 — affecting Connect Secure, its remote access VPN solution used by thousands of corporations and large organizations worldwide. According to its website, Ivanti has more than 40,000 customers, including universities, healthcare o...

New Zealand part of international Pall Mall Process to tackle spyware and hackers-for-hire

France, the UK, the US, and others will work on a framework for the responsible use of tools like NSO Group's Pegasus, and Shadowserver Foundation gains £1 million investment.

Dozens of surveillance companies are providing  spyware technology used by governments around the world to spy on the mobile phones of journalists, human rights defenders, dissidents and political opponents. Google’s Threat Analysis Group has identified and is actively tracking up to 40 companies involved in selling security exploits and surveillance capabilities to  governments with poor human rights records. The trade extends beyond well known spyware companies, like Israel&rsq...

We, as participant representatives of States, international organisations, private industry, academia, and civil society met to participate in an (…)