Stored XSS (Cross-site Scripting) vulnerability has been found in authentik software.
Netgear has fixed two critical remote code execution and authentication bypass vulnerabilities affecting multiple WiFi routers and warned customers to update their devices to the latest firmware...
Texas Governor Greg Abbott announced a Cyber Command, designed to combat surging attacks on the state by nation-states and cybercriminals
Atomic Stealer, Poseidon Stealer and Cthulhu Stealer target macOS. We discuss their various properties and examine leverage of the AppleScript framework. The post Stealers on the Rise: A Closer...
Research released Tuesday by watchTowr shows how easy an old storage bucket can be repurposed by malicious attackers. The post Here’s all the ways an abandoned cloud instance can cause security...
Thousands of people have begun returning to their abandoned homes in northern Gaza after Israeli forces opened the Netzarim corridor, which separates the northern and southern parts of the...
Microsoft has released patches to address two Critical-rated security flaws impacting Azure AI Face Service and Microsoft Account that could allow a malicious actor to escalate their privileges...
Google has shipped patches to address 47 security flaws in its Android operating system, including one it said has come under active exploitation in the wild. The vulnerability in question is...
U.S. food delivery giant Grubhub says hackers accessed the personal details of customers and drivers after breaching its internal systems. Grubhub is a popular food-ordering and delivery platform...
A 59-year-old man from Irvine, California, was sentenced to 87 months in prison for his involvement in an investor fraud ring that stole $50 million between 2012 and October 2020. [...]
As the gateways to corporate networks, VPNs are an attractive target for attackers. Learn from Specops Software about how hackers use compromised VPN passwords and how you can protect your...
Cybersecurity researchers have disclosed details of a now-patched vulnerability impacting the Microsoft SharePoint connector on Power Platform that, if successfully exploited, could allow threat...
Jscambler claims at least 17 sites have been infected with web skimmers, including Casio’s
A 7-Zip vulnerability allowing attackers to bypass the Mark of the Web (MotW) Windows security feature was exploited by Russian hackers as a zero-day since September 2024. [...]
Following last week’s disclosure by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and a subsequent notification from... The post Claroty counters CISA, FDA claims; identifies...
An investigation into more than 300 cyberattacks against US K–12 schools over the past five years shows how schools can withhold crucial details from students and parents whose data was stolen.
CISA’s FOCAL Plan, which aims to standardize the cybersecurity operations of federal civilian agencies, marks an important step in the federal government's efforts to strengthen cyber defenses and...
Food delivery company GrubHub disclosed a data breach impacting the personal information of an undisclosed number of customers, merchants, and drivers after attackers breached its systems using a...
Malicious DeepSeek packages on PyPI spread malware, stealing sensitive data like API keys. Learn how this attack targeted developers and how to protect yourself.
The feature will no longer be available starting Feb. 28. Microsoft wants to focus on “new areas that will better align to customer needs.”
The healthcare industry has become increasingly reliant on technology to enhance patient care, from advanced image-guided surgery to…
Thailand's Central Investigation Bureau said it apprehended a 52-year-old woman accused of laundering $182.8 million in romance scam funds at the behest of her Nigerian boyfriend.
Prepare for a successful IT career with lifetime access to expert-led courses covering CompTIA A+, Network+, Security+, and Cloud+ certification prep.
DPRK 'Contagious Interview' campaign continues to target Mac users with new variants of FERRET malware and GitHub devs with repo spam.
Andean Medjedovic, a 22-year-old Canadian, was responsible for stealing tens of millions of dollars' worth of cryptocurrency from two platforms in 2021 and 2023, according to U.S. prosecutors.
We are excited to share that CRN has named Barracuda’s Patrick O’Donnell, senior vice president of Americas sales, and Greg Saenz, vice president of channels for the Americas, to its prestigious...
As many as 768 vulnerabilities with designated CVE identifiers were reported as exploited in the wild in 2024, up from 639 CVEs in 2023, registering a 20% increase year-over-year. Describing 2024...
An Italian investigative journalist said he was the target of a spyware attack disclosed by WhatsApp. © 2024 TechCrunch. All rights reserved. For personal use only.
An Italian investigative journalist said he was the target of a spyware attack disclosed by WhatsApp. © 2024 TechCrunch. All rights reserved. For personal use only.
Welcome to the Threat Context Monthly blog series where we provide a comprehensive roundup of the most relevant cybersecurity news and threat information from KrakenLabs, Outpost24’s cyber threat...