Page 27 - Volt Typhoon News Today

Fortinet has unveiled a critical security flaw in its SSL VPN, CVE-2024-21762, allowing hackers to execute arbitrary code.

China-sponsored cyber actors have accessed IT networks for destructive cyber attacks against US critical infrastructure in the event of a major crisis or conflict with the country, a coalition of top intelligence agencies has warned.

The US needs to figure out how to disconnect its industrial-control systems from its networks—and fast, says a top leader of the defense R&D not-for-pro...

The flaw has a critical severity rating with a CVSS score of 9.6 and allows a remote unauthenticated actor to execute arbitrary commands by specially crafted HTTP requests.

The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and Federal Bureau of Investigation (FBI), along with key U.S. and international government agencies published a Joint Cybersecurity Advisory recently on malicious activity by a People’s Republic of China (PRC) state-sponsored cyber actor, known as Volt Typhoon, to compromise critical infrastructure and associated actions that should be urgently undertaken by all organizations.

Last week the FBI Director, CISA Director, NSA Director, and National Cyber Director testified publicly about current and ongoing threats to US critical infrastructure providers by...

Also in this issue: How the SEC's reporting rules are being weaponized, quishing attacks plaguing execs, and tabletop exercises making a comeback.

The Chinese state-sponsored hacking group known as Volt Typhoon has been living in the networks of some critical industries for “at least five years,” according to a joint cybersecurity advisory issued by the U.S. and its allies on Wednesday.

On Jan. 31, the U.S. government announced it had disrupted a Chinese Community Party (CCP) botnet used to conceal hacking attacks on U.S. critical infrastructure. The announcement...

Source: WhataWin | Getty Images