SailPoint this week warned that a critical-severity vulnerability in the identity and access management (IAM) platform IdentityIQ could allow attackers to access restricted files. SailPoint’s ...
A recently patched critical Apache Struts 2 vulnerability tracked as CVE-2024-53677 is actively exploited using public proof-of-concept exploits to find vulnerable devices. Apache Struts is an ...
Claroty's Team82 researchers, who have discovered and sampled IOCONTROL for analysis, report that it's a nation-state cyberweapon that can cause significant disruptions in critical infrastructure.
"Apache Struts sits at the heart of many corporate IT stacks, driving public-facing portals, internal productivity applications, and critical business workflows," Saeed Abbasi, product manager of ...
Microsoft says a new threat actor started targeting critical infrastructure The group is linked to Silk Typhoon It engages in spear phishing and vulnerability exploits Storm-0227, a Chinese state ...