CISA Adds Langflow and Trend Micro Apex One Vulnerabilities to KEV — The Hacker News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added vulnerabilities in Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities (KEV) catalog. The Apex One zero-day, actively exploited in the wild, allows attackers to execute arbitrary code. Organizations using these products should prioritize patching to mitigate potential threats and reduce their attack surface.

Global Takedown of VPN Used by 25 Ransomware Groups — The Hacker News

Authorities in Europe and North America dismantled a criminal VPN service used by 25 ransomware groups, intercepting traffic and seizing domains. This operation highlights the importance of monitoring VPN services that facilitate cybercriminal activities. Security teams should review their VPN usage policies to ensure compliance and prevent potential misuse by threat actors.

Megalodon Campaign Targets GitHub Repos with Malicious Workflows — The Hacker News

A new automated attack campaign, Megalodon, has been disclosed, targeting over 5,561 GitHub repositories with malicious CI/CD workflows. This campaign represents a significant threat to open-source projects, as it can lead to the distribution of compromised code. Developers should audit their CI/CD configurations and implement security measures to defend against such attacks.

• Verizon DBIR: Healthcare Fends Off Increased Social Engineering Attacks [Dark Reading]
• Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware [The Hacker News]
• Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access [The Hacker News]
• Hackers steal patient and billing data from German hospitals via third-party provider - The Record from Recorded Future News [Google News Security]