More than a month after PoC made public Fortinet finally published a security advisory on Friday for a critical FortiWeb path traversal vulnerability under active exploitation – but it appears digital intruders got a month’s head start.… READ MORE HERE…

Amazon spilled the TEA Yet another supply chain attack has hit the npm registry in what Amazon describes as “one of the largest package flooding incidents in open source registry history” – but with a twist. Instead of injecting credential-stealing code or ransomware into the packages, this one is a token farming campaign.… READ MORE HERE…

Crooks spoof US insurers, threaten bogus extradition to pry loose personal data and cash Chinese speakers in the US are being targeted as part of an aggressive health insurance scam campaign, the FBI warns.… READ MORE HERE…

Advisory updated as leading cybercrime crew opens up its target pool The US Cybersecurity and Infrastructure Security Agency (CISA) has issued new guidance to organizations on the Akira ransomware operation, which poses an imminent threat to critical sectors.… READ MORE HERE…

Cybercrime crew has ravaged multiple private organizations using Oracle EBS zero-day for months The UK’s National Health Service (NHS) is investigating claims of a cyberattack by extortion crew Clop.… READ MORE HERE…