Your Security Digest · 01 aug

Today, 28 things to read.

11 critical · 17 to skim · nothing on fire

Data source: supabase

tracked28

critical11

active exploit0

28 incidents · government / KEVupdated live

Jul 302d ago

…

mediumcritical-infrastructure

CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs

CISA is currently observing a significant increase in cyber threat actors targeting programmable logic controllers (PLCs) in the Water and Wastewater Systems (WWS) Sector.

aeo—social0 · flat

Jul 293d ago

…

criticalzero-day

Russian hackers exploit Exchange OWA zero-day for long-term mailbox access

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor called

aeo—social0 · flat

Today, 28 things to read.

CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs

Russian hackers exploit Exchange OWA zero-day for long-term mailbox access

CISA Adds One Known Exploited Vulnerability to Catalog

CISA shares advice on isolating vital systems during cyberattacks

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Russian hackers exploit Zimbra zero-click flaw for email theft

CISA orders urgent action on actively exploited Langflow RCE flaw

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Adds Four Known Exploited Vulnerabilities to Catalog

Hackers abuse ViPNet software to target Russian govt agencies

CISA urges immediate action on actively exploited Fortinet flaws

CISA orders feds to patch actively exploited Oracle flaw by Saturday

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA warns admins to patch actively exploited SharePoint flaws

US charges alleged operators of Russian bulletproof hosting service

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA Urges SharePoint Hardening After New Exploitations

CISA warns of actively exploited RCE flaws in Joomla extensions

CISA Adds One Known Exploited Vulnerability to Catalog

Lessons Learned from CISA’s Recent GitHub Leak

Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting

Money launderer accused of stealing seized crypto while in prison

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA orders feds to patch max severity ColdFusion flaw by Friday

CISA orders feds to prioritize patching Langflow auth bypass flaw

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog