The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a security flaw in NextGen Healthcare Mirth Connect to its Known Exploited Vulnerabilities catalog. Known as a Deserialization of Untrusted Data Vulnerability, the issue could allow an unauthenticated attacker to execute code. Federal agencies must remediate vulnerabilities by June 10, 2024, and private organizations are advised to do the same.

Chinese APT IronHusky Deploys Updated MysterySnail RAT on Russia
After a long period of silence, the MysterySnail RAT malware, first linked to Chinese-speaking threat group IronHusky APT in 2017, is now actively attacking in