Sophos ZTNA Updates
New Let’s Encrypt and regional support.
Similar Posts
Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation
Bys sThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday formally added a critical security flaw impacting React Server Components (RSC) to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild. The vulnerability, CVE-2025-55182 (CVSS score: 10.0), relates to a case of remote code execution that could be triggered by…
Google Cloud Researchers Uncover Flaws in Rsync File Synchronization Tool
Bys sAs many as six security vulnerabilities have been disclosed in the popular Rsync file-synchronizing tool for Unix systems, some of which could be exploited to execute arbitrary code on a client. “Attackers can take control of a malicious server and read/write arbitrary files of any connected client,” the CERT Coordination Center (CERT/CC) said in an…
Qilin Ransomware Turns South Korean MSP Breach Into 28-Victim ‘Korean Leaks’ Data Heist
Bys sSouth Korea’s financial sector has been targeted by what has been described as a sophisticated supply chain attack that led to the deployment of Qilin ransomware. “This operation combined the capabilities of a major Ransomware-as-a-Service (RaaS) group, Qilin, with potential involvement from North Korean state-affiliated actors (Moonstone Sleet), leveraging Managed Service Provider (MSP)
Air Force Employee Pleads Guilty to Conspiracy to Disclose Unlawfully Classified National Defense Information
Bys sA civilian employee of the U.S. Air Force assigned to the U.S. Strategic Command (USSTRATCOM) at Offutt Air Force Base pleaded guilty today to conspiring to transmit classified information relating to the national defense (National Defense Information) on a foreign online dating platform beginning in or around February 2022 until in or around April 2022. “The…
VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks
Bys sMicrosoft has announced that Visual Studio Code (VS Code) will apply a two-hour delay before extensions for the integrated development environment (IDE) are updated automatically to a newer version in an attempt to tackle software supply chain threats. “When automatic updates are enabled, new versions are auto-updated two hours after they are published, adding an…
Researchers Expose PWA JavaScript Attack That Redirects Users to Adult Scam Apps
Bys sCybersecurity researchers have discovered a new campaign that employs malicious JavaScript injections to redirect site visitors on mobile devices to a Chinese adult-content Progressive Web App (PWA) scam. “While the payload itself is nothing new (yet another adult gambling scam), the delivery method stands out,” c/side researcher Himanshu Anand said in a Tuesday analysis. “The…