RSS feed source: US Computer Emergency Readiness Team

Summary

The Cybersecurity and Infrastructure Security Agency (CISA) is releasing this advisory in response to ransomware actors leveraging unpatched instances of a vulnerability in SimpleHelp Remote Monitoring and Management (RMM) to compromise customers of a utility billing software provider. This incident reflects a broader pattern of ransomware actors targeting organizations through unpatched versions of SimpleHelp RMM since January 2025.

SimpleHelp versions 5.5.7 and earlier contain several vulnerabilities, including CVE-2024-57727—a path traversal vulnerability.1 Ransomware actors likely leveraged CVE-2024-57727 to access downstream customers’ unpatched SimpleHelp RMM for disruption of services in double extortion compromises.1 

CISA added CVE-2024-57727 to its Known Exploited Vulnerabilities (KEV) Catalog on Feb. 13, 2025.

CISA urges software vendors, downstream customers, and end users to immediately implement the Mitigations listed in this advisory based on confirmed compromise or risk of compromise.

Download the PDF version of this report:

AA25-163A Ransomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software Provider (PDF, 420.49 KB ) Mitigations

CISA recommends organizations implement the mitigations below to respond to emerging ransomware activity exploiting SimpleHelp software. These mitigations align with the Cross-Sector Cybersecurity Performance Goals (CPGs) developed by CISA and the National Institute of Standards and Technology (NIST). The CPGs provide a minimum set of practices and protections that CISA and NIST recommend all organizations implement. CISA and

Click this link to continue reading the article on the source website.

RSS feed source: US Computer Emergency Readiness Team

The Department of Engineering Science, in collaboration with the Department of Experimental Psychology, intends to appoint an Associate Professor in Biomedical Engineering (Technology for Mental Health and Cognition) with effect from 1st October 2025, or as soon as possible thereafter.  This is one of four new academic appointments underpinning the recently established £25m Podium Analytics Institute in Sports Medicine and Technology. The successful candidate will be based at the Institute of Biomedical Engineering (OX3 7DQ) and will be offered a (non-tutorial) Fellowship at St Catherine’s College under arrangements described in the Job Description. The appointee will benefit from working with researchers in experimental psychology whose expertise is in adolescent mental health, and there is potential for joint working with the Department of Experimental Psychology. The salary will be on a scale currently from £55,755 p.a. to £74,867 p.a. plus additional benefits as indicated in

Click this link to continue reading the article on the source website.

RSS feed source: US Computer Emergency Readiness Team

Aalto University is where science and art meet technology and business. We shape a sustainable future by making research breakthroughs in and across our disciplines, sparking the game changers of tomorrow and creating novel solutions to major global challenges. Our community is made up of 13 000 students, 400 professors and close to 4 500 other faculty and staff working on our dynamic campus in Espoo, Greater Helsinki, Finland. Diversity is part of who we are, and we actively work to ensure our community’s diversity and inclusiveness. This is why we warmly encourage qualified candidates from all backgrounds to join our community.

Call for Applications: Doctoral Researcher in Industrial Wood Construction

Description:
We are currently seeking a skilled and highly motivated Doctoral Researcher interested in conducting research related to wood construction and structures. This position—Doctoral Researcher in Industrial Wood Construction—is a collaborative opportunity between

Click this link to continue reading the article on the source website.