Cybersecurity News, Awards, Webinars, eSummits, Research

Security researchers say companies don’t revoke API keys lightly and point out that invalidating the API keys could shut down all system that rely on those APIs.

One of the patches follows CISA listing it on the Known Exploited Vulnerabilities (KEV) catalog in the spring.

Two of the bugs allow for unauthenticated access and modification privileges for MOVEit Transfer database content, while the third would allow an attacker to terminate instances of the application at will. A security bulletin from the company lists all three as critical or high severity.

Threat actors used to inject the botnet malware through phishing campaigns and malicious links but have shifted to exploiting a now-patched Netwrix Auditor vulnerability.

Cisco advised customers to disable the encryption feature in the switches, as no patches or workaround are yet available.

SC Media spoke to Matt Connors, Chief Information Security Officer for Southern New Hampshire University, about how his organization reframed IAM with the support of marketing and student advocacy. Here are the key takeaways.

Microsoft appears to have no plans to patch the vulnerability, which is now being used by red teams as a malicious payload delivery method.