CISA

Phishing is key threat vector and a Blue Team bête noire...

A pre-auth RCE in IBM Aspera Faspex is being exploited in the wild

One of 14 new advisories on vulnerable ICS software...

And, um, do you know how to restore from backup without Active Directory?

POCs have circulated for years...

Knock Knock. Who's there? Multiple APTs, patch your shit.

Attacks against ICS and OT systems are an increasingly real concern though.

Crowdstrike-discovered vuln added to CISA's Known Exploited Vulnerabilities list.

SOHO devices and unpatched enterprise switches are the way in.