CISA releases draft NCIRP
The U.S. Cybersecurity and Infrastructure Agency (CISA) has released a draft update to the National Cyber Incident Response Plan (NCIRP), addressing significant changes in policy and cyber operations since its…
Sophos fixes Triple Critical Vulnerabilities in its Firewall
Sophos released patches for three critical security vulnerabilities in their widely-used network security tool, Sophos Firewall that posed significant risks, including remote code execution and privilege escalation. CVE-2024-12727: Pre-Authentication SQL…
Posted inYear 2024
Most Prolific Ransomware Groups in 2024 Analysis
In 2024, ransomware attacks grew in sophistication, aggression, and unpredictability. The number of ransomware gangs increased, targeting larger organizations and demanding higher ransoms. These malicious groups focused on critical infrastructure…
CISA adds BeyondTrust CVE-2024-12356 to its KEV Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-12356: Command Injection Vulnerability in BeyondTrust PRA and RS Overview: CVE-2024-12356 is a…