Tag: Industrial Cybersecurity

GitHub Supply Chain Attack Campaign Expands Through Stolen Developer Credentials

Risk & Resilience
The GhostAction campaign has reportedly compromised around 1,900 GitHub accounts and targeted more than 30,000 repositories to steal CI/CD secrets, cloud credentials and API keys.

Next.js Patch Addresses Critical Remote Code Execution And Service Disruption Risks

Risk & Resilience
Next.js has released an emergency security update fixing critical remote code execution vulnerabilities and a denial of service issue affecting certain applications using caching and SVG processing features.

CISA Flags Actively Exploited Sierra Wireless Router Flaw In KEV Catalog

Risk & Resilience
CISA adds CVE-2018-4063 affecting Sierra Wireless AirLink routers to its KEV catalog after reports of active exploitation targeting industrial and OT environments.

Recent articles

spot_img