Aggregator

You must login to view this content

CISA released seven Industrial Control Systems (ICS) Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. 

• ICSA-25-329-01 Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share
• ICSA-25-329-02 Rockwell Automation Arena Simulation
• ICSA-25-329-03 Zenitel TCIV-3+
• ICSA-25-329-04 Opto 22 groov View
• ICSA-25-329-05 Festo Compact Vision System, Control Block, Controller, and Operator Unit products
• ICSA-25-329-06 SiRcom SMART Alert (SiSA)
• ICSA-22-333-05 Mitsubishi Electric FA Engineering Software (Update C) 

CISA encourages users and administrators to review newly released ICS Advisories for technical details and mitigations.

A convincing (but fake) “Windows Update” screen can be the perfect lure for tricking users into infecting their computers with malware. Add a multi-stage delivery chain with some offbeat techniques, and infostealer operators have everything they need to slip past defenses. The malware delivery campaigns “Since the beginning of October, Huntress has identified multiple ClickFix lure sites that trick victims into running a malicious command, following a consistent format and leading to a unique execution … More →

The post Fake “Windows Update” screens fuels new wave of ClickFix attacks appeared first on Help Net Security.

The 2025 Black Friday shopping season has become a prime hunting ground for cybercriminals, with threat actors recording over 2 million phishing attacks targeting online gamers and shoppers worldwide. As global e-commerce continues to grow at 7-9% annually, attackers have adapted their tactics to exploit the seasonal rush, reduced user vigilance, and high-demand retail periods. […]

The post Threat Actors Exploiting Black Friday Shopping Hype – 2+ Million Attacks Recorded appeared first on Cyber Security News.