David Jones

Kurita America, a subsidiary of a Tokyo-based company, is the latest in a string of companies tied to the water industry targeted by hackers.

The company is working on a new patch and CVE as an existing patch for a previously disclosed vulnerability is not providing adequate protection.

Starbucks regained access to the employee scheduling platform, while authorities continue to probe claims by a threat group.

Researchers warned that companies primarily in the trucking, food, retail and shipping industries were under attack.

After the company urged users to patch a critical flaw, researchers are asking about the lack of a CVE and additional guidance.

Researchers confirmed a new zero-day vulnerability is separate from a flaw originally disclosed in October. A notorious ransomware group linked itself to the attacks.

The proposed legislation comes amid a surge in ransomware and state-linked attacks against U.S. water utilities.

The personal data of hundreds of thousands of vulnerable residents is at risk after a threat group attacked a state social services database.

Exploitation activity was observed about a week after the CVE was disclosed.

Cybersecurity News