CISA Warns of RESURGE Malware Targeting Ivanti Appliances

🎓️ Vulnerable U | #107

CISA having a bad time, Microsoft and Google Threat Intel full of goodies this week, SSRF on the rise as per GreyNoise, and much more!

Microsoft Details Silk Typhoon’s IT Supply Chain Attacks

Downstream victims of Silk Typhoon's supply-chain attacks were largely focused in the state and local government as well as the IT sector.

Ivanti Patches Critical Bugs in Multiple Products

The flaws affect Connect Secure, Policy Secure, Secure Access Client, and Cloud Services Application

🎓️ Vulnerable U | #100

CISA's Advisory board disbanded, Zero click Outlook 0day, Fortinet saga continues, PowerSchool breach has data back to 1985, Sam Curry hacked a Subaru, and more!

FBI and CISA Detail How Attackers Are Exploiting Ivanti CSA Flaws

The four vulnerabilities that Ivanti disclosed in the fall include two bugs that can be used to gain remote code execution, a path traversal bug, and a SQL injection vulnerability.

🎓️ Vulnerable U | #098

Gravy Analytics massive location data breach, Fake nuclear scare breakdown, License plate cameras open to the public, and so much more!

Ivanti Warns of Connect Secure Zero-Day Attacks

Threat actors are exploiting a vulnerability in Ivanti Connect Secure appliances.

🎓️ Vulnerable U | #084

Cloudflare thwarts the largest DDoS ever seen, Mandiant chases a hacker who faked his death, Lockbit and Evil Corp law enforcement info, Adult AI sites are a front for Russian Hackers, and more!

🎓️ Vulnerable U | #070

US bans Kaspersky, LockBit Federal Reserve Saga, CDK Global ongoing auto dealer outage, LLMs for Vulnerability Research, and more!

🎓️ Vulnerable U | #061

ArcaneDoor Cisco Zero Days, Mandiant Trends Report, Change Healthcare Ransomware Payment Details, New iPhone Phishing Scam, AI generating police reports, Principal framed with AI-generated voice, and more!

🎓️ Vulnerable U | #054

Google Eng stole AI secrets for China, Giant US Healthcare Payment System still down weeks later from ransomware, APLHV took the money and ran, TikTok close to being banned, Cyber pros are turning to crime and giving up on CISA, Predator Spyware Report and sanctions, and more!