Risk Assessments/Management

Malicious actors could abuse a high-severity flaw in the widely-used Fastjson library to enable remote code execution, reports The Hacker News.

On the heels of a White House Cybersecurity Executive Forum, HHS HC3 is urging the healthcare sector to make use of free resources to improve risk assessments and overall cyber resiliency.

The U.S. government has been urged by House Armed Services Committee Chairman Adam Smith, D-Wash., to significantly increase investments in upgrading national security communications and software to ensure that they are adequately protected against cybersecurity threats, CyberScoop reports. "We're talking about software systems that, you know, operate our missiles and our ships and everything, they just don't, they are not as protected as they should be.

Two-thirds of companies impacted by cybercrimes during the past year experienced more than one attack, 10% of whom had been attacked at least 10 times, reports ZDNet.

New York-based cybersecurity threat detection and analysis firm Miburo is set to be acquired by Microsoft, according to SecurityWeek.

Hello XD ransomware has been updated to include a new encryptor with algorithm modifications and custom packing to further evade detection, according to BleepingComputer

Proofpoint researchers found that threat actors have been leveraging various phishing attack techniques to facilitate cryptocurrency theft, ZDNet reports.

The Hacker News reports that the popular Carrier LenelS2 HID Mercury access control system has been discovered by Trellix researchers to be impacted by up to four critical zero-day flaws, which could be exploited to obtain complete system control.