Microsoft Exchange zero day vulnerabilities perform data exfiltration, reconnaissance

Microsoft confirmed last week that two vulnerabilities are being exploited against on-premises…

CISA orders federal IT overhaul with automated asset inventory, visibility

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a binding operational…

Chinese state-sponsored APT41 targeting U.S. healthcare sector

New reports are emerging that the notorious Chinese state-sponsored hacking group known…

Oracle Cloud Infrastructure critical vulnerability disclosed

Researchers have disclosed a new critical vulnerability that would allow users to…

Microsoft Teams stores auth tokens as cleartext in Windows, Linux, Macs

Microsoft Teams, the collaboration platform included in the Office 365 suite, has…

North Korea’s Lazarus hackers exploiting Log4j flaw to hack US energy companies

On Thursday, threat intelligence company Cisco Talos reported that Lazarus (also known…