Application Security
Software maker calls special attention to CVE-2023-29300, a deserialization of untrusted data bug with a CVSS severity score of 9.8/10.
Hi, what are you looking for?
SecurityWeek
Cybercrime
Russian national Vladimir Dunaev pleaded guilty to involvement in the development and use of the TrickBot malware that caused tens of millions of dollars...
Cybercrime
Office supply retail giant confirms security incident disrupted online orders, communications channels and customer service lines.
Malware & Threats
New Turtle macOS ransomware is not sophisticated but shows that cybercriminals continue to target Apple devices.
Network Security
Zyxel patches at least 15 security flaws that expose users to authentication bypass, command injection and denial-of-service attacks.
Ransomware
Qlik Sense vulnerabilities CVE-2023-41266, CVE-2023-41265 and CVE-2023-48365 exploited for initial access in Cactus ransomware attacks.
Ransomware
The Black Basta ransomware group has infected over 300 victims and received more than $100 million in ransom payments.
Cybercrime
Facing ransomware zero-days, Progress Software will release regular service packs to help customers mitigate critical security flaws.
Application Security
Hackers linked to the Truebot malware are exploiting a year-old Netwrix Auditor flaw to break into organizations in the U.S. and Canada.
Ransomware
Japan’s Port of Nagoya this week suspended cargo loading and unloading operations following a ransomware attack.
Data Breaches
Ransomware gangs are targeting schools, stealing confidential documents and then dumping them online.
Ransomware
LockBit ransomware group claims to have hacked TSMC and is asking for a $70 million ransom, but the chip giant says only a supplier...
Ransomware
The 8Base ransomware gang has hit roughly 30 small businesses over the past month, reaching a total of approximately 80 victims since March 2022.
Cybercrime
Energy giants Schneider Electric and Siemens Energy confirm being targeted by the Cl0p ransomware group in the campaign exploiting a MOVEit zero-day.
Cybercrime
Gen Digital, which owns Avast, Avira, AVG, Norton, and LifeLock, said employee data was compromised in the MOVEit ransomware attack.
Cybercrime
The Office of the Australian Information Commissioner (OAIC) says some of its files were stolen in a ransomware attack on law firm HWL Ebsworth.
Cybercrime
The Alphv/BlackCat ransomware gang has taken responsibility for the February cyberattack that hit social media site Reddit.
Ransomware
The cybersecurity firm SecurityScorecard says it detected 2,500 vulnerable MOVEit servers across 790 organizations, including 200 government agencies.
Endpoint Security
Security features that major CPU vendors plan on integrating into their future products can increase the surface for certain types of attacks.
CISO Strategy
Cyberwarfare
The US cybersecurity agency calls attention to a Russian APT targeting academia, defense, governmental organizations, NGOs and think-tanks.
Application Security
Cybercrime
