Some of the attacks launched in March by a financially-motivated threat actor against organizations in North America involved a zero-day privilege escalation vulnerability affecting...
Hi, what are you looking for?
SecurityWeek
Facebook announced today that the source code of its capture the flag (CTF) platform has been made available on GitHub.
Serious WPA_Supplicant Vulnerability Allows Privilege Escalation, DoS Attacks A serious vulnerability affecting a Wi-Fi technology used in the Android operating system and many other products...
Microsoft released on Tuesday 16 security bulletins to patch more than 30 vulnerabilities, including JScript and VBScript zero-days exploited in attacks targeting users in...
Peter “Pierre” Romar, a 36-year-old Syrian national suspected of being a member of the notorious Syrian Electronic Army hacktivist group, has been extradited from...
CloudFlare and Sucuri reported observing various types of ImageTragick exploits used by malicious actors for reconnaissance purposes and to gain access to vulnerable web...
The Federal Trade Commission (FTC) and the Federal Communications Commission (FCC) have joined forces in an effort to analyze the security update practices of...
The details of an unspecified number of Google employees were exposed recently by one of the search giant’s third-party vendors.
A security researcher was arrested and charged after finding some serious vulnerabilities on a couple of elections websites in Florida.
Researchers have created an experimental worm that is capable of spreading from one programmable logic controller (PLC) to another without needing a PC or...
Google security engineer Sven Blumenstein has identified over two dozen vulnerabilities affecting several products from HPE-owned network access solutions provider Aruba Networks.
The most commonly targeted vulnerability in 2015 was a Windows flaw that came to light in 2010 after being exploited by the notorious Stuxnet...
Hackers caused disruption to a Locky campaign after they breached one of the attackers’ server and replaced the real ransomware with a harmless file...
Malicious actors have compromised thousands of WordPress websites and are randomly redirecting their visitors to sites that host malware and scams.
Researchers at Zscaler have come across a new information stealer Trojan that leverages legitimate tools to target online banking users.
An analysis of proof-of-concept (PoC) exploits shared online over the last year has shown that social media is the main distribution channel for PoCs,...
FireEye has disclosed the details of a serious information disclosure vulnerability affecting a Qualcomm software package found in hundreds of Android device models.
Cisco has released software updates to address critical and high severity vulnerabilities affecting the company’s FirePOWER and TelePresence products.
Apple released an update for its Xcode integrated development environment this week to address a couple of serious vulnerabilities in the Git version control...
The Linux Foundation’s Core Infrastructure Initiative (CII) announced this week the names of the projects that received badges as part of its best practices...
Artificial Intelligence
Researchers say the new ‘Cryptographic Context Injection’ technique conceals malicious instructions until they are decrypted inside a trusted execution environment.
Cloud Security
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Malware & Threats