Supply chain

Researchers said they uncovered a new side-channel vulnerability in Intel processors that could potentially allow the leak of sensitive data.

Numerous widely used iOS and macOS apps could be compromised in supply chain attacks with a trio of vulnerabilities in the CocoaPods dependency manager, all of which have already been remediated in October, The Hacker News reports.

More than a dozen health providers had data from their customers impacted by the incident, including their names, birthdates, addresses, Social Security numbers, medical details, and health insurance information.

Data compromise has already been confirmed by fintech startup Mercury, which disclosed the hack of certain account numbers, business owner names, emails, and deposit balances as a result of the Evolve intrusion.

Additional details were lacking but the remote access and remote control software provider revealed that there has been no indication of any product environment or customer data compromise.

Only U.S banking-as-a-service provider Evolve Bank & Trust was noted by cyber threat monitoring firm HackManac to have been impacted by an attack claimed by the LockBit ransomware operation to have resulted in the compromise of 33 TB of files from the Federal Reserve Board's systems.

Zyxl NAS devices are under attack and the exploit is pretty simple, A new UEFI vulnerability with a name that some people don't like, that time you setup a load balancer and forgot about it, I love it when there is a vulnerability in a Wifi driver, Polyfill is filling the Internet with supply chain vulnerabilities, open source doesn't mean more sec...