China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access

A recent investigation has exposed a critical security vulnerability in certain China-made ZBT routers, which have been shipping with two implants that grant unauthenticated attackers root access. This alarming discovery affects thousands of users worldwide who rely on these routers for their internet connectivity. The issue lies in the design of the ZBT routers’ firmware, … Read more

Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

A trio of critical vulnerabilities, each rated a perfect 10.0 on the CVSS scale, has been discovered in ServiceNow’s platform. These flaws could allow unauthenticated attackers to execute code and even manipulate SQL databases, leaving millions of users vulnerable to potential breaches. The issue affects various aspects of the ServiceNow system, including its web application, … Read more

Okta Shares Surge on Strong Earnings, Growing Demand for AI Identity Security

Okta’s Shares Surge as Identity Security Firm Sees Strong Demand for AI-Powered Solutions Shares of Okta, a leading identity security company, have surged by over 19% after reporting impressive second-quarter financial results. The company’s revenue rose 11% year-over-year to $805 million, driven largely by growing demand for its artificial intelligence (AI) powered solutions. Okta’s subscription … Read more

PaperCut Releases Emergency Patch for Exploited Zero-Day

Critical Vulnerability Exploited in PaperCut Software Leaves Thousands Exposed A severe zero-day vulnerability in PaperCut’s print management solutions has been exploited in the wild, prompting an emergency patch release from the company. The flaw, which affects PaperCut NG and MF versions, allows attackers to gain unauthorized access to the application server, potentially leading to data … Read more

Windows 11 KB5120998 update released with 35 changes and fixes

Microsoft has released a new preview update for Windows 11, dubbed KB5120998, which brings a host of improvements to the operating system. This optional non-security update is designed to test bug fixes, features, and quality enhancements before they’re rolled out to all users during next month’s Patch Tuesday release. The KB5120998 update affects Windows 11 … Read more

APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations

A notorious state-sponsored hacking group has unleashed a sophisticated backdoor into European government and diplomatic organizations, exploiting vulnerabilities in software development tools to gain deep access to sensitive systems. The malware, linked to APT28, a well-known Russian threat actor, is designed to evade detection and provide attackers with a persistent foothold on compromised networks. The … Read more

PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

A Zero-Day Exploit in PaperCut Software Exposes Organizations to Data Breaches and Identity Theft A severe vulnerability has been discovered in the popular print management software, PaperCut. The zero-day exploit, which affects all versions of PaperCut, allows attackers to gain unauthorized access to sensitive information and escalate privileges across domains. This means that organizations using … Read more

Cyberattack Causes Global Disruption at Boston Scientific

Boston Scientific, a leading medical technology company, is reeling from a devastating cyberattack that has crippled its global operations. The attack, which occurred on August 25, has caused significant disruption to the company’s IT systems, affecting access to certain operating systems and business applications. The impact of the attack is particularly concerning given Boston Scientific’s … Read more

CISO Conversations: Chris Wheeler – Trust Is the Job, From the Navy to the C-Suite

Trust is the Job: A Conversation with Resilience’s Chris Wheeler Chris Wheeler, Chief Information Security Officer (CISO) at Resilience, has spent his career navigating the complexities of cybersecurity. With a background in threat research and analysis, he’s had a front-row seat to some of the most pressing security challenges facing businesses today. But what sets … Read more

Okta Shares Surge on Strong Earnings, Growing Demand for AI Identity Security

Okta’s Surge on Strong Earnings Highlights Growing Demand for AI Identity Security Identity security company Okta has reported stronger-than-expected second-quarter financial results, with shares surging over 19% in extended trading. The surge is largely driven by growing demand for artificial intelligence (AI) identity security solutions, a key area of focus for the company. Okta’s quarterly … Read more