Two critical security flaws discovered in Moxa industrial routers affect multiple device series across critical infrastructure sectors. CVE-2024-9138 enables root access through hard-coded credentials, while CVE-2024-9140 allows remote code execution. Affected users must upgrade to firmwar...
Iranian state-sponsored malware IOCONTROL targets critical infrastructure in Israel and the US, affecting IoT devices and OT/SCADA systems across multiple manufacturers. With sophisticated features including modular design, encrypted communications, and remote command execution capabilitie...
A new malware campaign targeting Taiwan's manufacturing, healthcare, and IT sectors employs SmokeLoader, a sophisticated malware strain from 2011. Despite recent disruption by Europol, attackers use cracked versions to deploy phishing attacks, exploiting Excel vulnerabilities to steal cred...
A significant dual-threat Chinese cyber campaign has emerged in 2024, comprising both direct cyber attacks and influence operations:...
Here's a comprehensive summary of the critical infrastructure exposure report...
