Adobe updates Shockwave

The max severity (CVSS 10) bug enables command injection through the GlobalProtect feature.

The Cybersecurity and Infrastructure Security Agency has called for immediate authentication credential resets across all federal agencies that had their emails with Microsoft containing sensitive data compromised in an attack by Russian state-sponsored threat operation Midnight Blizzard, also known as APT29 and Cozy Bear, according to CyberScoop.

The Cybersecurity and Infrastructure Security Agency has expanded access to its Malware Next-Gen malware analysis service to organizations in the private sector months after it was offered to government and military workers, reports The Record, a news site by cybersecurity firm Recorded Future.