Tag: network
-
HPE patches critical ArubaOS-CX remote code execution flaw
Hewlett Packard Enterprise (HPE) has patched a critical vulnerability in the ArubaOS-CX network operating system that could lead to remote code execution. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hpe-patches-critical-arubaos-cx-remote-code-execution-flaw/
-
Cryptohack Roundup: US Seizes Hamas-Linked Crypto
Also: ClickFix Attack Abuses Polygon Blockchain. This week, U.S. seizes Hamas-linked funds, ClickFix attack abuses Polygon blockchain, Bithumb wins lawsuit over bitcoin credit error, software flaw exposes six Cosmos networks, Cronos restarts after Tectonic attack and Moonwell investigates $8.7 million exploit. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cryptohack-roundup-us-seizes-hamas-linked-crypto-a-32734
-
Three HP Easy Start Flaws Let Attackers Gain Root Privileges on macOS
Three high-severity vulnerabilities in HP Easy Start for macOS could allow both local and network-positioned attackers to disrupt the printer software installation process and, under certain conditions, gain privileged access or modify files with root permissions. These vulnerabilities, tracked as CVE-2026-12554, CVE-2026-12555, and CVE-2026-12556, were discovered by researcher Nir Yehoshua from Cipher Security Labs during…
-
Ransomware Hackers Can Go From Network Access to Encryption in Less Than 24 Hours
Tags: access, breach, business, credentials, cyber, data-breach, encryption, hacker, infrastructure, network, ransomware, service, threatThe Gentlemen ransomware-as-a-service operation can move from confirmed access inside a victim network to encryption in under 24 hours. Demonstrating how rapidly modern affiliates can turn stolen credentials or exposed infrastructure into a full-scale business disruption. Counter Threat Unit researchers tracking the operation as GOLD SHERWOOD found that the Gentlemen affiliates follow a repeatable post-compromise…
-
OpenMatter Network Expands Platform with New Capabilities for Secure AI, Computing and Data Collaboration
Melbourne, Florida, September 2nd, 2026, CyberNewswire Less than three months after its commercial launch, OpenMatter Network today announced a significant expansion of the platform with new capabilities that make it easier for enterprises, developers and researchers to build, deploy and collaborate using sensitive data and AI while maintaining cryptographic control over how information is accessed,…
-
Global Public-Private Action Disrupts Russia-Linked Sality Botnet
US, European Law Enforcement, Cyber Firms Target Two-Decade-Old P2P Malware Network. U.S. and European authorities, CrowdStrike and Shadowserver disrupted the Russia-linked Sality botnet by exploiting its trusted-peer protocol to isolate roughly 15,000 infected machines and sever a malware network that had operated since 2003. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/global-public-private-action-disrupts-russia-linked-sality-botnet-a-32732
-
The FCC wants consumers to rate their telecom’s anti-robocall protections
The agency also booted 14 phone service providers from U.S. networks for violating existing robocalling regulations. First seen on cyberscoop.com Jump to article: cyberscoop.com/the-fcc-wants-consumers-to-rate-their-telecoms-anti-robocall-protections/
-
Hackers Abuse Legitimate IT Management Tool to Sneak Into Business Networks
Cybersecurity researchers at Huntress have uncovered a phishing campaign that abuses Faronics Deploy, a legitimate endpoint management platform used by businesses, schools, and government offices to remotely install software and run scripts across their networks. According to the security firm, threat actors sent victims phishing emails disguised as invoices, tax documents, financial records, and event…
-
Hackers Abuse Legitimate IT Management Tool to Sneak Into Business Networks
Cybersecurity researchers at Huntress have uncovered a phishing campaign that abuses Faronics Deploy, a legitimate endpoint management platform used by businesses, schools, and government offices to remotely install software and run scripts across their networks. According to the security firm, threat actors sent victims phishing emails disguised as invoices, tax documents, financial records, and event…
-
Industrial Cybersecurity
Industrial organizations are increasingly connecting operational technology (OT) environments to enterprise IT networks, cloud platforms, remote monitoring systems, industrial IoT devices, and third-party services. This connectivity creates operational advantages, but it also expands the cyberattack surface. Industrial cybersecurity is the… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/industrial-cybersecurity/
-
Palo Alto Acquires Console to Expand Cortex Agentic Security
Palo Alto Networks announced it has acquired the AI automation startup Console to expand what AI agents can do inside its Cortex security platform. Financial terms of the deal were not disclosed. The company said it plans to bring Console’s technology into Cortex to help security teams investigate activity, prioritize work and take action across..…
-
OpenMatter Network Expands Platform with New Capabilities for Secure AI, Computing and Data Collaboration
Melbourne, Florida, 2nd September 2026, CyberNewswire First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/openmatter-network-expands-platform-with-new-capabilities-for-secure-ai-computing-and-data-collaboration/
-
Palo Alto Networks Acquires Console to Add Agentic AI Workflows to Cortex
Palo Alto Networks has acquired Console, an AI-native platform designed to enable agentic workflows across enterprise operations. This acquisition expands the autonomous capabilities of Palo Alto Networks’ Cortex security operations platform. Announced on September 1, 2026, the deal aims to help security teams investigate signals, prioritize tasks, and respond to operational issues at machine speed.…
-
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
What can we learn from a BGP hijacking that poisoned production software? Plenty. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/09/well-executed-bgp-attack-uses-hijacked-ips-to-infect-real-networks/
-
Is Silent Network Authentication a Restricted Authenticator Under SP 800-63-4?
No. Silent network authentication is not a restricted authenticator under NIST SP 800-63B-4, and the reason is not that it passed a test. SP 800-63B-4 names exactly one restricted authenticator, “the use of the PSTN for out-of-band authentication,” and… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/is-silent-network-authentication-a-restricted-authenticator-under-sp-800-63-4/
-
Palo Alto: Security Debt Exposes Firms to AI-Powered Attacks
CEO Nikesh Arora Says Years of Deferred Upgrades Could Enable Major Breaches. Palo Alto Networks CEO Nikesh Arora warned that roughly $1 trillion in accumulated cybersecurity technical debt could leave enterprises vulnerable to AI-enabled threats as model proliferation expands attack surfaces faster than companies can modernize defenses. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/palo-alto-security-debt-exposes-firms-to-ai-powered-attacks-a-32719
-
Hackers Hide Reverse Shell Traffic Behind Signed Apps and AWS API Gateway
Threat actors are using a layered fake IT-support campaign to obtain remote access, deploy a malicious MSI package and conceal hands-on-keyboard activity behind legitimate signed applications and AWS API Gateway infrastructure. The operation demonstrates how attackers can divide execution, command-and-control and interactive shell functions across multiple processes to frustrate conventional endpoint and network detections. Once…
-
Authorities Turn Sality’s P2P Network Against Itself, Cutting Off New Malware Payloads
The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-peer (P2P) botnet known as Sality as part of a coordinated law enforcement operation.The effort was undertaken on August 31, 2026, by authorities from the U.S., Bulgaria, Hungary, and Romania, in collaboration with private industry partners CrowdStrike and the Shadowserver Foundation.…
-
Cronos network resumes activity after $74 million lending exploit
First seen on scworld.com Jump to article: www.scworld.com/brief/cronos-network-resumes-activity-after-74-million-lending-exploit
-
China-linked campaign targets high-value networks, critical infrastructure
First seen on scworld.com Jump to article: www.scworld.com/news/fire-ant-campaign-targets-high-value-networks-and-critical-infrastructure
-
China-Linked Hackers Turn Cisco Routers Into Covert Network Gateways
China-linked Fire Ant hackers compromised Cisco IOS XR routers, management hosts, and authentication systems to create covert paths into other networks. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-fire-ant-hackers-cisco-ios-xr-routers/
-
Florida and Texas move to block Flock cameras over privacy concerns
Flock’s searchable network of 130,000 license plate cameras around the U.S. have sparked bipartisan privacy and civil liberties concerns. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/01/florida-and-texas-move-to-block-flock-cameras-over-privacy-concerns/
-
Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks
A coordinated voice-phishing (vishing) campaign, named Spring Ring, used fake IT support accounts on Microsoft Teams to trick employees into installing malware or granting … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/01/spring-ring-vishing-campaign-microsoft-teams/
-
Retired Devices, Active Risks: How an ITAD Company Protects Data After Decommissioning
A laptop can be removed from an employee’s desk, disconnected from the network and marked retired in an asset system within the same afternoon. None of those steps means the data risk has disappeared. Retired technology often sits in storage rooms or staging locations before reaching its final destination. During that period, devices still contain…
-
AI-Enhanced BraZetsu Malware Powers Underground Market Selling Access to Corporate Networks
BraZetsu, a Python-based Windows malware framework allegedly operated by the Brazilian threat actor Exilware to identify, profile, and monetize compromised corporate systems. Rather than behaving like a conventional infostealer, BraZetsu appears designed to support an Initial Access Broker operation, converting infected endpoints into cataloged access offerings for an underground marketplace. The framework is reportedly the…
-
Berlin refuses to be blackmailed after network breach
Berlin’s state government has confirmed an extortion attempt following a data theft from its administrative network in August. Governing Mayor Kai Wegner and Interior … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/01/berlin-data-breach-rhysida-ransomware/
-
Cronos blockchain restarts after $74 million Tectonic exploit
The Cronos blockchain network has resumed trading activity after a price-manipulation attack on the Tectonic cryptocurrency lending platform allowed an attacker to borrow $74 million. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cronos-blockchain-restarts-after-74-million-tectonic-exploit/
-
OT Networks Still Need Monitoring
CERT Polska recently published a follow-up report detailing the hack of a Polish combined heat and power (CHP) plant in December 2025. CERT Polskas report concludes with several important recommendations, including protecting OT systems through network segmentation and monitoring traffic entering an[…] First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/ot-networks-still-need-monitoring/
-
Cloudflare Unveils Adaptive Intelligence to Counter AI-Fueled Bot Attacks
Cloudflare introduces real-time defense against automated cyberattacks. I still have friends who are convinced that every attack on their websites is deliberately targeting their companies. Nah. These days anyone with a modest budget can easily rent networks of compromised devices, mask their location behind real home Internet addresses, and launch AI-enabled attacks that mimic people……