CISA has released details about a federal agency that recently had at least two public-facing servers compromised by attackers exploiting a critical Adobe ColdFusion vulnerability. The vulnerability, tracked as CVE-2023-26360, was disclosed in March and was shortly after added to CISA’s known exploited vulnerability (KEV) catalog, setting an April 5 deadline for agencies to fix the issue. In a Tuesday advisory, CISA revealed the federal civilian executive branch (FCEB) in question was successfully attacked in June and into July, meaning the vulnerability went unpatched for more than three months after CISA’s deadline.  CISA did not respond to questions about whether the agency has now patched the vulnerability,… Source link

[unable to retrieve full-text content]See You Tonight At The Holiday Stroll!  06880 Source link

[unable to retrieve full-text content]How to use intelligence on failed ColdFusion attack to bolster your …  SC Media Source link

[unable to retrieve full-text content]What a failed attack against ColdFusion revealed about ransomware …  SC Media Source link

A recent attack levied against servers running out-of-date Adobe software sheds some light on how threat actors are currently trying to exploit systems and deploy ransomware. In this recent attack, which took place in September and early October, the threat actors hoped to gain access to Windows servers and, subsequently, deploy ransomware payloads. While the attack wasn’t successful, lessons must be learned here. According to an analysis by Sophos researchers who uncovered the attack, the threat actor was trying to deploy ransomware created using leaked source code from the family of ransomware known as LockBit 3.0. This is a trend Sophos researchers noticed in other campaigns, as well. The attackers likely chose the LockBit 3.0 ransomware family because of its speed and… Source link

[unable to retrieve full-text content]Customs agent held for ganja smuggling  Times of India Source link

[unable to retrieve full-text content]Tech Enthusiasts Need to Check Out These Youtube Channels!  Medium Source link

In the ever-evolving cosmos of technology, YouTube stands as a beacon, illuminating the path for tech enthusiasts, professionals, and the simply curious. It’s a digital playground where innovation meets accessibility, and where the future is unpacked, one video at a time. Whether you’re chasing the latest in AI advancements, thirsting for new gadget reviews, or diving into the deep end of software tutorials, YouTube’s tech channels are like a never-ending tech fest. This roundup showcases the crème de la crème of technology channels, where each click brings you closer to understanding the pulse of our digital world. From the intricacies of cutting-edge tech to the nuts and bolts of everyday gadgets, these channels are your go-to guides in the vast universe of technology. So,… Source link

[unable to retrieve full-text content]Wasatch 22: North Timpanogos (Success) – Powder Resort Region …  Powder Magazine Source link

[unable to retrieve full-text content]Adobe Releases Security Updates for ColdFusion  CISA Source link