Vulnerability Management

More than 130 other organizations have been compromised by the same 0ktapus phishing campaign that resulted in successful attacks against Twilio, Klaviyo, and MailChimp, as well as an averted attack attempt against Cloudflare, according to BleepingComputer.

Active exploitation of a security flaw in Palo Alto Networks' PAN-OS firewall software in an attempted reflection denial-of-service attack has prompted Palo Alto Networks to call on users to immediately apply security patches that have been issued last week, reports The Record, a news site by cybersecurity firm Recorded Future. Attackers could exploit the vulnerability, tracked as CVE-2022-0028, in unpatched PA-, VM-, and CN-Series of the PAN-OS firewall software to "conduct reflected and amplified TCP denial-of-service (RDoS) attack," according to Palo Alto Networks, which noted that the attack could also conceal the identity of attackers.

BleepingComputer reports that novel download request filtering techniques have been implemented by North Korean threat group Kimsuky since the beginning of the year in an effort to restrict malicious payload downloads to their targets alone.

Microsoft security researchers say they’ve discovered that the threat group responsible for the SolarWinds attack has been able to maintain access to compromised environments via a capability they’re calling “MagicWeb.”

New CRA survey finds that some 55% say fear of ransomware drives more focus on vulnerability management programs.

The findings, discovered by Checkmarx and published Friday, underscore how open source software repositories like PyPi are increasingly being targeted and leveraged by malicious actors.

GitLab has called on users of GitLab community and enterprise edition versions 11.3.4 to 15.1.4, 15.2 to 15.2.3, and 15.3 to immediately apply the recently issued software update addressing a critical remote command execution vulnerability, tracked as CVE-2022-2884, according to BleepingComputer.