Alexander Culafi

AWS is one of several cloud providers that will implement MFA requirements over the next year, with other relevant names including Google Cloud and Microsoft Azure.

A Chinese state-sponsored threat actor associated with APT41 exploited an unpatched zero-day vulnerability in the Fortinet VPN FortiClient.

Microsoft at this year's Ignite announced Zero Day Quest, a large onsite hacking event offering the chance of large payouts to AI and cloud security researchers.

The FBI and CISA revealed this month that a Chinese nation-state threat group breached several U.S. telecommunications carriers, activity that reflects the scale and severity of China's hacking efforts.

The Department of Justice unsealed charges against five suspected members of Scattered Spider for allegedly stealing millions of dollars in phishing scams.

A "Russia-aligned group" known as RomCom exploited Firefox and Windows Task Scheduler zero-day vulnerabilities in the wild, according to research from antimalware vendor ESET.

Attackers are targeting misconfigured and outdated Citrix NetScaler devices with increased levels brute force attacks.

Cleo published a patch for its Harmony, VLTrader and LexiCom managed file transfer products, which addresses a "critical vulnerability" that's separate from CVE-2024-50623.

Threat actors are targeting Cleo managed file transfer products through two vulnerabilities, including a new zero-day flaw.

CISA published a mobile security guide Wednesday for "highly targeted" individuals to defend themselves against Chinese nation-state hacking campaigns.