[MEDIUM] – CISA Releases Updated Insider Threat Mitigation Guide
CISA released an updated guide for organizations developing or improving insider-threat mitigation programs.
[MEDIUM] – Surfshark Discloses Breach of Misconfigured Internal Test Server
Surfshark says an unauthorized party accessed a misconfigured internal test server; customer data and VPN services were unaffected.
[CRITICAL] – GitLab Releases Critical Patch for CE and EE
GitLab released 19.3.2, 19.2.6, and 19.1.8 with critical security fixes for self-managed installations.
[HIGH] – Trezor Warns of Phishing After Email-Provider Breach
Trezor says attackers breached its email provider and sent phishing messages from its legitimate domain.
[HIGH] – Veradigm Discloses Vendor-Credential Data Exposure
Veradigm says stolen vendor credentials were used to download patient personal data, including some Social Security numbers.
[HIGH] – Check Point Issues Patches for Two Critical VPN Certificate Flaws
Check Point released fixes for two CVSS 9.8 VPN certificate flaws that may permit unauthenticated remote code execution.
[HIGH] – Android September Updates Address 180 Vulnerabilities
Android's September updates address 180 vulnerabilities, including critical System-component issues that may allow remote code execution.
[HIGH] – Berlin Investigates Newly Published Credentials and Government-Breach Data
Berlin says newly released breach data includes login credentials; officials are assessing affected systems and people.
[HIGH] – VMware Workstation and Fusion Host-Execution Flaws Patched
Broadcom patched VMware flaws that can let a guest VM administrator execute code on the host.
[HIGH] – Boston Scientific Reports Recovery Progress After Cybersecurity Incident
Boston Scientific reports recovery progress and no new unauthorized activity after its August cybersecurity incident.