--- TLP:WHITE ---
News

− Chinese State Hackers Main Suspect in Recent Ivanti CSA Zero-Day Attacks

Fortinet believes state-sponsored threat actors are behind the recent attacks involving exploitation of Ivanti CSA zero-days.
https://www.securityweek.com/ivanti-csa-zero-day-exploitation-attributed-to-state-sponsored-hackers/

   

Vulnerabilities

− CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Security Patches

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical security flaw impacting Fortinet products to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
https://thehackernews.com/2024/10/cisa-warns-of-critical-fortinet-flaw-as.html
   

− US, UK warn of Russian APT29 hackers targeting Zimbra, TeamCity servers

U.S. and U.K. cyber agencies warned today that APT29 hackers linked to Russia's Foreign Intelligence Service (SVR) target vulnerable Zimbra and JetBrains TeamCity servers "at a mass scale.
https://www.ncsc.gov.uk/news/russian-foreign-intelligence-poses-global-threat-with-cyber-campaign-exploiting-established-vulnerabilities
   


Community News

− Germany wins first place in the European Cybersecurity Challenge 2024

Germany is the winner of the 2024 edition of the ECSC, followed by Italy in second place and Poland in third place.
https://www.enisa.europa.eu/news/germany-wins-first-place-in-the-european-cybersecurity-challenge-2024
   

--- TLP:WHITE ---