Ionut Arghire

GitLab has patched a critical-severity SAML authentication bypass affecting both Community Edition (CE) and Enterprise Edition (EE) instances.

Malicious hackers are caught brute-forcing Foundation Accounting Software at scale, compromising organizations in the construction industry.

CISA and the FBI have released an alert on XSS vulnerabilities, urging organizations to adopt a secure by design approach and eliminate them.

Google has released Chrome 129 with patches for nine vulnerabilities, including a high-severity bug in the V8 engine.

AT&T has agreed to pay $13 million in a settlement with the FCC over a 2023 data breach at a third-party vendor’s cloud environment.

C/side has raised $6 million in a seed-stage funding round to help organizations protect against malicious browser third-party scripts.

D-Link has released patches for critical vulnerabilities that could allow attackers to execute arbitrary code and commands on routers.

Tenable shares details on a dependency confusion attack that led to the execution of code on Google’s internal servers.

BlackCloak has raised $17 million in Series B funding to protect high-profile individuals from sophisticated cyberattacks.

Chinese national Song Wu allegedly sent spear-phishing emails to NASA, Air Force, Navy, Army, and FAA employees.

The RansomHub ransomware gang has published 487 gigabytes of data allegedly stolen from Kawasaki Motors Europe’s systems.

Microsoft warns that a recently patched Windows vulnerability was exploited in the wild as a zero-day prior to July 2024.

The Port of Seattle, which operates the SEA Airport, has confirmed that the August outage was the result of a ransomware attack.

SolarWinds has announced patches for a critical-severity remote code execution vulnerability in Access Rights Manager.

The recently observed Hadooken malware targeting Oracle WebLogic applications is linked to multiple ransomware families.

A joint report from the Committees on China and Homeland Security warns of the security risks posed by Chinese cranes in US ports.

Doctor Web warns of the new Vo1d Android malware infecting roughly 1.3 million TV boxes running older OS versions.

GitLab has released security updates to resolve multiple vulnerabilities in GitLab CE/EE, including a critical-severity pipeline execution flaw.

Google is rolling out new features in Chrome to better protect users online and to improve their control over personal data.

Aembit has raised $25 million in Series A funding to protect non-human identities and minimize attack surface.