HHS introduces new cybersecurity requirements for healthcare organizations, updating HIPAA Security Rule to combat rising cyber threats. The proposal mandates regular asset inventory, vulnerability assessments, encryption, multi-factor authentication, and annual testing. With healthcare ra...
A critical bug in Windows 11 24H2 physical media installations with October-November 2024 security updates prevents future security update installations. While Windows Update installations remain unaffected, Microsoft recommends using December 2024 security update for media installations. ...
Multiple critical vulnerabilities discovered in Ruijie Networks' cloud platform and Reyee OS devices affect approximately 50,000 cloud-connected devices. The flaws include weak password recovery, server-side request forgery, and arbitrary command execution vulnerabilities. Researchers deve...
Apache Traffic Control has patched a critical SQL injection vulnerability (CVE-2024-45387, CVSS 9.9) affecting versions 8.0.1 and earlier. The flaw allows privileged users to execute arbitrary SQL commands through PUT requests. Users should upgrade to version 8.0.2 immediately to address t...
Iranian state-sponsored group Charming Kitten has deployed BellaCPP, a new C++ variant of the BellaCiao malware, discovered by Kaspersky during an Asian system breach investigation. The malware, which serves as a custom payload dropper, targets organizations in the US, Middle East, and Ind...
