Stay ahead of cyber threats with today’s security updates

TLDR:

• Python vulnerability in the aiohttp open-source framework being exploited by ransomware gang
• Industrial control system products from Siemens, Mitsubishi Electric, Delta Electronics, and Softing need patching

Developers and IT administrators should ensure they are using the latest version of the aiohttp Python framework to prevent exploitation by the ShadowSyndicate ransomware gang. The U.S. Cybersecurity and Infrastructure Security Agency has released advisories for multiple industrial control system products that require patching. Additionally, the U.S. FCC has approved a cybersecurity labeling program for consumer products, while Sophos’ Threat Report highlights the increase in malware distribution through malvertising. Various data breaches have also been reported, including attacks on France Travail, Saint Louis University, Nations Direct Mortgage, and more.