The Cybersecurity and Infrastructure Agency (CISA) has added three vulnerabilities to its Known Exploited Vulnerabilities catalog, one of which is a critical flaw in Sophos Web Appliance that was patched in April 2023. Despite the patch, active exploitation of the vulnerability has been noted, highlighting the common practice among attackers of targeting older vulnerabilities.
VPS of MI, PLLC Announces Data Breach Following Discovery of Malware | Console and Associates, P.C.
Visiting Physician Services (VPS of MI) discovered a data breach caused by malware on their IT systems, affecting the sensitive information of approximately 20,604 patients.
