⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
CISA released an advisory about ransomware actors leveraging unpatched SimpleHelp RMM vulnerabilities to compromise a utility billing software provider. The campaign has targeted organizations since January 2025 using SimpleHelp versions 5.5.7 and earlier.
CISA released an advisory about ransomware actors leveraging unpatched SimpleHelp RMM vulnerabilities to compromise a utility billing software provider. The campaign has targeted organizations since January 2025 using SimpleHelp versions 5.5.7 and earlier.
CISA released this advisory in response to ransomware actors leveraging unpatched SimpleHelp RMM vulnerabilities to compromise customers of a utility billing software provider. The actors likely used CVE-2024-57727, a path traversal vulnerability, for double extortion.
Notification This report is provided "as is" for informational purposes only.
CISA updated its Malware Analysis Report for RESURGE malware associated with Ivanti Connect Secure, providing deeper technical insight. The analysis shows that RESURGE can remain dormant until a remote actor connects, posing an ongoing threat.
CISA published malware analysis report MAR-25993211-r1.v2 analyzing RESURGE malware targeting Ivanti Connect Secure appliances. The malware enables persistent backdoor access and data exfiltration through compromised VPN gateways.