-
Critical Exim Mail Server Vulnerability Exposes Millions to Malicious Attachments
A critical security issue has been disclosed in the Exim mail transfer agent that could enable threat actors to deliver malicious attachments to target users’ inboxes. The vulnerability, tracked as CVE-2024-39929, has a CVSS score of 9.1 out of 10.0. It has been addressed in version 4.98. “Exim through 4.97.1 misparses a multiline RFC 2231…
-
U.S. Seizes Domains Used by AI-Powered Russian Bot Farm for Disinformation
The U.S. Department of Justice (DoJ) said it seized two internet domains and searched nearly 1,000 social media accounts that Russian threat actors allegedly used to covertly spread pro-Kremlin disinformation in the country and abroad on a large scale. “The social media bot farm used elements of AI to create fictitious social media profiles —…
-
Nike argues Odell Beckham Jr. violated contract with custom gloves
Odell Beckham Jr.’s lawyers attempted to paint a picture of retaliatory actions Nike took towards to persuade the NFL star to renew his contract.
-
PGE customers made record savings during heat wave
Programs that reward energy demand reductions pay off, Portland General Electric says.
-
Here are the Portland Business Journal’s 40 Under 40 for 2024
The 2024 class includes professionals with titles such as CEO, founder, partner and senior vice president.
-
Downtown Portland office leasing surpasses suburbs, a first in nearly two years
Downtown had about 363,300 square feet of leases signed last quarter.
-
Major Portland law firm renews downtown lease, plans remodel
The firm, which was the first tenant in the building, has been operating under a hybrid model since the Covid pandemic.
-
Palo Alto Networks Patches Critical Flaw in Expedition Migration Tool
Palo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass. Cataloged as CVE-2024-5910 (CVSS score: 9.3), the vulnerability has been described as a case of missing authentication in its Expedition migration tool that could lead to an admin account…
-
60 New Malicious Packages Uncovered in NuGet Supply Chain Attack
Threat actors have been observed publishing a new wave of malicious packages to the NuGet package manager as part of an ongoing campaign that began in August 2023, while also adding a new layer of stealth to evade detection. The fresh packages, about 60 in number and spanning 290 versions, demonstrate a refined approach from…
-
Chinese APT41 Upgrades Malware Arsenal with DodgeBox and MoonWalk
The China-linked advanced persistent threat (APT) group codenamed APT41 is suspected to be using an “advanced and upgraded version” of a known malware called StealthVector to deliver a previously undocumented backdoor dubbed MoonWalk. The new variant of StealthVector – which is also referred to as DUSTPAN – has been designated DodgeBox by Zscaler ThreatLabz, which…
