Eduard Kovacs

A researcher has disclosed the details of a new attack method that targets devices with a Thunderbolt port, allowing malicious actors to access a...

Cloud security company Ermetic emerged from stealth mode this week with a platform that automates detection and remediation of identity and access-based risks.

More than 30 technology and telecom companies announced this week that they have formed a new alliance, the Open RAN Policy Coalition, that calls...

Microsoft says it’s investigating claims that its GitHub account has been hacked, and while some say the leaked files appear to be legitimate, it’s...

Cisco’s Talos threat intelligence and research group revealed on Wednesday that one of its researchers discovered a critical remote code execution vulnerability in the...

Recorded Future this week announced the availability of Express, a free web browser extension designed to help security teams prioritize vulnerability patching and alerts...

Researchers have found another vulnerability in software made by Schneider Electric that is similar to the one exploited by the notorious Stuxnet malware.

GitHub on Wednesday announced two new security features designed to help developers identify vulnerabilities and potential secrets in their code.The company announced several new...

Researchers analyzed some of the most popular VPNs and discovered that two of them were affected by vulnerabilities that could be exploited to hack...

Australian shipping giant Toll informed customers on Tuesday that it has shut down some IT systems after discovering a piece of ransomware. This is...

European law enforcement authorities say they have dismantled a cybercrime group named “InfinityBlack” after arresting several individuals in Poland and Switzerland.

An analysis conducted by FireEye’s Mandiant Security Validation team revealed that only a small percentage of attacks generate alerts and many intrusions are not...

A proof-of-concept (PoC) exploit has been made public for a recently patched

A researcher has demonstrated that threat actors could exfiltrate data from an air-gapped device over an acoustic channel even if the targeted machine does...

A new executive order signed on Friday by U.S. President Donald Trump prohibits the acquisition of bulk-power system equipment that could contain intentional backdoors...

Oracle warned customers on Thursday that threat actors have been spotted attempting to exploit multiple recently patched vulnerabilities, including a critical WebLogic Server flaw...

Several vulnerabilities, most of which have been described as cross-site scripting (XSS) flaws, have been patched in WordPress this week with the release of...

A sophisticated phishing kit has been used by multiple cybercrime groups to target high-ranking employees in North America and other parts of the world,...

YARA 4.0.0 was released on Wednesday with some important new features and performance improvements.YARA is a highly popular open source tool designed to help...