The largest regulated water utility company in the U.S. said ‘unauthorized activity’ was detected last week.

Security pros say teams running Okta Classics should take immediate action, checking their logs for exploitation.

Phishing attacks are become more prevalent as threat actors are arming themselves with potent new tools.

The “BabyLockerKZ” variant has been in use by an unnamed threat actor since late 2023.

Security pros says while Star Blizzard will most likely regroup, it does degrade their operations and gives defenders some time to deploy AI-powered tools.

Attackers leverage exposed access keys to run chatbot services at the victim’s expense.

Ivanti is advising administrators to get up to date on their patches following a new spell of exploits against Endpoint Manager (EPM).

More than 267,000 internet-exposed routers are likely vulnerable to exploitation.

If properly executed, the exploit would allow an attacker to obtain remote code execution on the target server.

While it not has been successful on its first wave of attacks, security pros warn that Stonefly intends to extort U.S. companies via ransomware.