Cybercrime
Trend Micro researchers have found evidence of the Rarstone remote access tool (RAT) in targeted attacks against various organizations in the telecommunications and energy...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
CrushFTP patches a zero-day vulnerability allowing unauthenticated attackers to escape the VFS and retrieve system files.
Application Security
Malicious hackers are targeting SAP applications at an alarming pace, according to warnings from Onapsis and Flashpoint.
Vulnerabilities
Cisco patches a high-severity Integrated Management Controller vulnerability for which PoC exploit code is available.
Vulnerabilities
Ivanti releases patches for 27 vulnerabilities in the Avalanche MDM product, including critical flaws leading to command execution.
Vulnerabilities
Chrome and Firefox security updates resolve over 35 vulnerabilities, including a dozen high-severity bugs.
Vulnerabilities
Oracle releases 441 new security patches to address 230 vulnerabilities as part of its April 2024 Critical Patch Update.
Malware & Threats
WASHINGTON - US authorities on Thursday warned makers of medical devices and hospital networks to step up efforts to guard against potential cyber attacks....
Application Security
The Open Web Application Security Project (OWASP) released an update to its Top 10 list of risks facing developers. As in previous years, injection...
Mobile & Wireless
BlackBerry released two security advisories on Tuesday, alerting customers about vulnerabilities that affect its BlackBerry Z10 smartphones and BlackBerry PlayBook tablets.
Vulnerabilities
Microsoft is urging businesses to prioritize a patch for Microsoft Office in order to thwart a spate of ongoing, targeted attacks that have appeared...
Vulnerabilities
Google has increased the amount of award money in its bounty program for researchers who discover and report vulnerabilities in Google products.
Vulnerabilities
Microsoft is planning for a relatively quiet Patch Tuesday next week that features only one critical security bulletin.The 'Critical' bulletin addresses issues in Internet...
Application Security
On Tuesday, Jerry Davis, the VA’s former CISO, told members of the House Veterans' Affairs oversight and investigations subcommittee the sensitive personal information the...
Vulnerabilities
Oracle has faced an uphill battle when it comes to Java and security. As soon as a series of fixes are released, someone somewhere...
Vulnerabilities
Robert Kugler, a 17-year-old German student submitted a bug report to PayPal’s bounty program earlier this month, and was told he was too young...
Vulnerabilities
Seven days – that is how long Google believes security researchers should have to give vendors to provide mitigations or a patch before disclosing...
Vulnerabilities
Drupal.org, home to one of the Web’s most popular Content Management System (CMS) platforms, has issued an alert to community members and reset all...
Nation-State
MITRE R&D network hacked in early January by a state-sponsored threat group that exploited an Ivanti zero-day vulnerability.