Urgent Security Updates: Cisco and VMware Address Critical Vulnerabilities

VMware has released security updates to fix a trio of flaws in Aria Operations for Networks that could result in information disclosure and remote code execution. The most critical of the three vulnerabilities is a command injection vulnerability tracked as CVE-2023-20887 (CVSS score: 9.8) that could allow a malicious actor with network access to achieve remote code execution. Also […]

Kimsuky Targets Think Tanks and News Media with Social Engineering Attacks

The North Korean nation-state threat actor known as Kimsuky has been linked to a social engineering campaign targeting experts in North Korean affairs with the goal of stealing Google credentials and delivering reconnaissance malware. « Further, Kimsuky’s objective extends to the theft of subscription credentials from NK News, » cybersecurity firm SentinelOne said in a report shared with The

Barracuda Urges Immediate Replacement of Hacked ESG Appliances

Enterprise security company Barracuda is now urging customers who were impacted by a recently disclosed zero-day flaw in its Email Security Gateway (ESG) appliances to immediately replace them. « Impacted ESG appliances must be immediately replaced regardless of patch version level, » the company said in an update, adding its « remediation recommendation at this time is full replacement of […]

La cybersécurité, clé de voûte pour l’avenir du travail hybride

Aujourd’hui, plus de la moitié (56%) des responsables de la sécurité français affirment que la protection de leurs collaborateurs en travail hybride va devenir plus complexe au cours de l’année.