The critical vulnerability is being exploited by BianLian, RansomwEXX and a Chinese nation-state actor known as Chaya_004
Dior confirmed a data breach compromising customer personal information, discovered on May 7
FrigidStealer malware targets macOS users via fake browser updates, stealing passwords, crypto wallets, and notes using DNS-based data…
Operation RoundPress targets webmail software to steal secrets from email accounts belonging mainly to governmental organizations in Ukraine and defense contractors in the EU
Kaspersky ICS CERT shares trends and statistics on industrial threats in Q1 2025.
Exploited CVEs are a leading cause of cloud breaches. Learn how to effectively mitigate them through context-aware risk prioritization.
Researchers discovered over 3000 Linux vulnerabilities in 2024, the most of any category
Nova Scotia Power confirms it suffered a data breach after threat actors stole sensitive customer data in a cybersecurity incident discovered last month. [...]
The voluntary cybersecurity charter asks NHS suppliers to commit to eight cybersecurity pledges, amid rising attacks on healthcare
Credential protection is key to preventing breaches. Secure APIs, rotate secrets and train devs to handle credentials safely…
The benefits of cybercrime aren't all flashy cars and watches. Sophos X-Ops researchers discovered it also fuels a far-reaching mix of ordinary, sometimes unremarkable businesses. The post Who...
The benefits of cybercrime aren't all flashy cars and watches. Sophos X-Ops researchers discovered it also fuels a far-reaching mix of ordinary, sometimes unremarkable businesses. The post Who...
The crypto exchange giant said the hacker bribed contractors and employees in support roles to steal data.
On the first day of Pwn2Own Berlin 2025, security researchers were awarded $260,000 after successfully demonstrating zero-day exploits for Windows 11, Red Hat Linux, Docker Desktop, and Oracle...
Google on Wednesday released updates to address four security issues in its Chrome web browser, including one for which it said there exists an exploit in the wild. The high-severity...
Over the years, many different technologies have transitioned to Cloud-based solutions, including ERP systems and email management platforms.…
Tor has announced Oniux, a new command-line tool for routing any Linux application securely through the Tor network for anonymized network connections. [...]
Police in Europe have shut down a fake online trading platform that scammed hundreds of victims out of…
The U.S. House Committee on Homeland Security convened a hearing to review the Department of Homeland Security’s (DHS)... The post Chinese cyber threats and infrastructure vulnerabilities dominate...
Multiple vulnerabilities have been discovered in Ivanti Endpoint Manager Mobile, the most severe of which could allow for remote code execution. Ivanti Endpoint Manager Mobile (EPMM) is a unified...
A news report highlighted that U.S. energy officials are re-evaluating the potential risks associated with Chinese-made devices that... The post US energy sector at risk, as Chinese inverters are...
Xona Systems, provider of secure access solutions for operational technology (OT) environments, announced its partnership with Solution Synergy,... The post Xona Systems and Solution Synergy...
Ivanti has released security patches to address two vulnerabilities in its Endpoint Manager Mobile (EPMM) software, which were being actively exploited in limited attacks. These vulnerabilities,...
A malicious package in the Node Package Manager index uses invisible Unicode characters to hide malicious code and Google Calendar links to host the URL for the command-and-control location. [...]
A malicious package in the Node Package Manager index uses invisible Unicode characters to hide malicious code and Google Calendar links to host the URL for the command-and-control location. [...]
Coinbase, a cryptocurrency exchange with over 100 million customers, has disclosed that cybercriminals working with rogue support agents stole customer data and demanded a $20 million ransom not...
Most online merchants now believe customers pose as big a threat as professional fraudsters
Russian hackers aren’t just targeting Ukraine — they also appear to be going after their defense contractors in other countries, new ESET research surmises. The post Fancy Bear campaign sought...
The percentage of ICS computers on which various types of malware spread via the internet and email were blocked increased for the first time in two years.
Unified visibility and context are the keys to an effective exposure management program. Learn how the new Tenable One connectors and unified dashboards give you a comprehensive view of your...