CISA ORDERS FEDERAL AGENCIES TO PATCH IVANTI FLAW BY SUNDAY
■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a binding directive requiring all federal agencies to patch an actively exploited vulnerability in Ivanti Sentry within three days.
■ MORE FROM THE SECURITY DESK
Gen's latest threat report details two distinct attack campaigns exploiting compromised email accounts and clipboard manipulation to steal from businesses and cryptocurrency users.
Two security researchers purchased commonly-used generic email domains and discovered hundreds of companies automatically sending sensitive corporate data to their listening services. The experiment reveals a widespread failure in email configuration practices across organizations.
Cyberattacks against hedge funds and private equity firms have been attributed to UNC6671, an extortion group connected to the BlackFile threat actors. The campaign represents an escalating threat to the financial sector.
A Go-based malware distributed through ClickFix attacks is targeting macOS users to steal cryptocurrency, passwords, and Apple Keychain data. The infostealer campaign combines social engineering with credential harvesting.