Page 8 - Shadowserver Foundation News Today

05.04.2023 - Rivian Automotive, Inc. (NASDAQ: RIVN) today announced it has hired Mike Johnson as its Chief Information Security Officer (CISO). Johnson joins Rivian from Fastly where he was CISO for over 3 years, securing the network and platform of the edge ...

A vulnerability with a 9.8 CVSS rating in IBM's widely deployed Aspera Faspex offering is being actively exploited to compromise enterprises.

A known vulnerability in Cacti is being used to drop Mirai, with researchers spotting multiple attempts.

A critical vulnerability is being actively exploited in the wild and a majority of internet-exposed servers have not been patched yet.

More than 1,600 instances of the Cacti device monitoring tool reachable over the internet are vulnerable to a critical security issue that hackers have already started to exploit.

Flaw allows Control Web Panel hackers to execute malicious code remotely, but a fix is available.

More than 60,000 Microsoft Exchange servers exposed online are yet to be patched against the CVE-2022-41082 remote code execution (RCE) vulnerability, one of the two security flaws targeted by ProxyNotShell exploits.

A Microsoft patch has been available for months now, but tens of thousands of endpoints are still vulnerable.

Kubernetes deployment is reportedly more widespread than ever, though security concerns remain.

Improper implementations of authentication APIs at a global crypto wallet service provider could have resulted in the loss of account control — and millions of dollars — from personal and business accounts.