SC Staff

Such newly secured funds will be leveraged by the firm, which offers a complete risk management platform for managed service providers, to advance product development, sales, and marketing initiatives, as well as bolster customer support investments, according to Cyrisma.

Such elevated prevalence of online devices in the U.S. has been attributed to the highly decentralized nature of its health system, a report from Censys revealed.

Malicious QR code messages have also been increasingly leveraged to compromise the sector, with Office 365 used to send over 15,000 of such messages to education entities, a Microsoft Threat Intelligence report showed.

Affected by the flaw, which has remained unresolved since being detailed by SSD Disclosure in an advisory late last month, were Linear eMerge E3 versions 0.32-03i, 0.32-04m, 0.32-05p, 0.32-05z, 0.32-07p, 0.32-07e, 0.32-08e, 0.32-08f, 0.32-09c, 1.00.05, and 1.00.07, according to SSD Disclosure.

Such escalating threats, which are exacerbated by being increasingly undetected by traditional security software, have not corresponded to improved security practices, with 95% of flawed OSS components still being downloaded during the past year despite the availability of more secure versions, according to a study from Sonatype.

While DumpForums claimed to have infiltrated the company's corporate GitLab server, mail server, and software management services, Dr. Web emphasized that the incident had not resulted in any customer data compromise.

Misconfigured Magento or OpenCart instances may have been targeted to facilitate the deployment of Mongolian Skimmer, which uses various event-handling methods to ensure extensive compatibility while hiding malicious activity with heavy Unicode character utilization.

Such an intrusion was claimed to have resulted in the exfiltration of troves of data, with Underground exposing confidential, financial, and legal documents, employees' personal and payroll data, non-disclosure agreements, patent and project information, and incident reports purportedly stolen from Casio's systems on its extortion portal.

All of the attacks also entailed the utilization of previously stolen credentials to infiltrate VPN gateways without multi-factor authentication, some of which were on outdated software.

Aside from the Zimbra and TeamCity vulnerabilities, APT29 could have also leveraged nearly two dozen other bugs, which should be immediately remediated.