Hackers have started scanning the web in search of Apache Tomcat servers affected by a recently disclosed vulnerability tracked as CVE-2020-1938 and dubbed Ghostcat.
Hi, what are you looking for?
SecurityWeek
There are more than 600 legitimate Microsoft subdomains that can be hijacked and abused for phishing, malware delivery and scams, researchers warned this week.
The Council of the District of Columbia on Tuesday unanimously passed a bill whose goal is to expand data breach notification requirements and improve...
A report published on Monday by Chinese cybersecurity firm Qihoo 360 claims that the U.S. Central Intelligence Agency (CIA) conducted an 11-year-long cyberespionage operation...
Legal services company Epiq has taken its systems offline globally after being hit by a piece of ransomware.Epiq said on Monday that it detected...
Threat actors linked to China increasingly targeted the telecommunications sector in 2019, according to endpoint security firm CrowdStrike.CrowdStrike on Tuesday published its 2020 Global...
The U.S. Department of Justice announced on Monday that two Chinese nationals have been charged with laundering over $100 million worth of cryptocurrency stolen...
Cybersecurity firm Checkpoint has created an encyclopedia of the various techniques used by malware to evade analysis.
Pharmacy store chain Walgreens has started informing some users of its mobile application that their personal and health-related information may have been seen by...
A serious vulnerability affecting Apache Tomcat can be exploited to read files from a server and in some cases even to achieve remote code...
ProtonMail on Thursday introduced a new feature designed to make it more difficult for hackers and spammers to impersonate users who have custom domain...
Intel patched over 230 vulnerabilities in its products last year, but less than a dozen impacted its processors, according to the company’s 2019 Product...
Cisco says it will release patches for wireless devices affected by the recently disclosed Wi-Fi chip vulnerability named Kr00k. The company says the flaw...
Many Vulnerabilities Found in Popular Docker Images, But Most Are Not Loaded Into Memory
A white hat hacker has earned $8,500 for a serious vulnerability that exposed the email addresses of HackerOne users.
A new vulnerability, which may have affected over one billion Wi-Fi-capable devices before patches were released, could have allowed hackers to obtain sensitive information...
The Reading Municipal Light Department (RMLD), an electric utility in Massachusetts, informed customers on Monday that its systems were targeted last week in a...
The developers of the free and open-source forum software MyBB have shared some data on the vulnerabilities patched in their product over the past...
A threat actor — likely a state-sponsored cyberespionage group — has used a sophisticated technique to allow a piece of malware hosted on a...
A Chrome 80 update released on Monday patches three high-severity vulnerabilities, including one that Google says has been exploited in the wild.
Artificial Intelligence
Industry professionals comment on various aspects of Fable 5, including dual-use capabilities, safeguards, and tiered access.
Incident Response
Vulnerabilities
Supply Chain Security
By default, npm install will no longer execute scripts from dependencies, unless explicitly allowed.
Artificial Intelligence
Management & Strategy
Vulnerabilities
Vulnerabilities
