CISA
CVE-2020-2883: You patched that when you first heard about it, right? Ditto these Mitel Colab bugs...
Meanwhile... "leadership deprioritized the treatment of a vulnerability their own cybersecurity team identified".
"This doesn’t bode well. Easterly has done an outstanding job and this role is too important to be a political football."
Expedition, a migration tool, hit by bug that could allow attackers with network access to "access secrets, credentials, and other data".
"These individuals appear to be gaining cyber experience and enhancing their technical skills through conducting cyber operations and intrusions."
Ransomware-as-a-service variant formerly known as Cyclops and Knight has "established itself as an efficient and successful service model" and attracted "high-profile affiliates from other prominent variants".