cisa - Tech News from Simmons Systems (Page 2)

Tech News from Simmons Systems

cisa

A collection of 34 posts

FBI Warns of Broad Cyber Threats Targeting 2022 Beijing Olympics

The FBI issues a warning about various cyber attacks and untrusted mobile apps threatening the 2022 Beijing Winter Olympics and Paralympics. Authorities urge travelers and athletes to leave personal devices at home.

Global Agencies Issue Joint Guidance to Mitigate Log4j Vulnerabilities

CISA, FBI, and international cybersecurity agencies release joint advisory detailing critical steps organizations must take to defend against actively exploited Log4j vulnerabilities.

Global Agencies Scramble as Critical Apache Log4j Flaw Emerges

A critical zero-day vulnerability in Apache Log4j triggers urgent warnings from global cybersecurity agencies as organizations rush to patch their systems.

Incomplete Log4Shell Patch Leaves Systems Open to Critical Log4j Flaw

CVE-2021-45046 is a critical Apache Log4j vulnerability that bypasses the initial Log4Shell fix in version 2.15.0. Attackers actively exploit this flaw in non-default configurations to achieve remote code execution.

Kaseya REvil Ransomware Attack Highlights Supply Chain Risks

The Russia-linked REvil group exploits a vulnerability in Kaseya's VSA tool, impacting up to 2,000 global organizations. This massive cyberattack serves as a stark warning about the vulnerabilities hidden within software supply chains.

Kaseya Ransomware Attack Disrupts Over 1,000 Businesses Worldwide

A massive ransomware attack on software supplier Kaseya exploits managed service providers to indirectly compromise at least 1,000 downstream businesses. The breach, linked to the REvil group, forces major operations like Swedish supermarkets to close temporarily.

Kaseya Mitigates Holiday Ransomware Attack Impacting Thousands of Small Businesses

Kaseya acts quickly to contain a sophisticated ransomware attack targeting its VSA software, minimizing the damage to roughly 1,500 small businesses. The company collaborates with the FBI and CISA to secure systems and restore operations.

colonial pipeline

Colonial Pipeline Shutdown Highlights Severe Risks of Ransomware Attacks

A major DarkSide ransomware attack forces Colonial Pipeline to halt fuel transportation along the US East Coast. The incident disrupts 45 percent of the region's fuel supply and prompts a massive federal investigation.

Biden's Final Cyber Executive Order Overhauls Federal Software Acquisition

A new cybersecurity executive order from the Biden administration introduces stricter requirements for software providers selling to the federal government. The order focuses heavily on closing security loopholes in software acquisition and addressing AI-fueled risks.

microsoft exchange

Ransomware Targets Tens of Thousands of Vulnerable Microsoft Exchange Servers

Hackers deploy DearCry ransomware on unprotected Microsoft Exchange servers using the same vulnerabilities exploited by a Chinese espionage group. Government agencies warn that thousands of organizations remain at high risk despite available security patches.

President Trump Fires Cybersecurity Chief Chris Krebs Over Election Claims

President Trump terminates top cybersecurity official Christopher Krebs following Krebs' statements affirming the security of the 2020 election. Krebs maintains that his agency handled the election protection efforts correctly.

Trump Ousts Cybersecurity Chief Over Election Security Statement

President Trump fires CISA Director Chris Krebs after the agency declares the 2020 election the most secure in American history. Krebs previously leads an effort to debunk widespread voter fraud disinformation.

Russian Intelligence Behind Widespread SolarWinds Supply Chain Cyberattack

The US government attributes a massive, ongoing cyberattack targeting government and critical infrastructure to the Russian SVR. The threat actor primarily exploits a compromised SolarWinds Orion update but also uses other methods like SAML token abuse.

CISA Warns Users to Apply Critical Apple Security Updates

Apple releases security patches for macOS and Safari to fix severe vulnerabilities that attackers are actively exploiting. CISA urges all users and administrators to update their systems immediately.

Trump Fires CISA Director Krebs Amid Wave of Top Cyber Departures

President Trump fires CISA Director Christopher Krebs following the agency's efforts to debunk election misinformation, sparking a wave of high-level cybersecurity departures. The sudden leadership vacancies leave critical government cyber posts empty during a vulnerable transition period.