Ionut Arghire

Threat actors have exploited Proofpoint’s email protection service to deliver millions of spoofed phishing emails.

Acronis warns of a critical-severity Acronis Cyber Infrastructure (ACI) vulnerability being exploited in attacks.

HealthEquity says the personal and health information of 4.3 million individuals was compromised in a data breach.

TechOperators leads a $6 million Series A funding round for Evo Security, a provider of IAM solutions for MSPs.

Progress Software calls attention to a critical remote code execution flaw in the Telerik Report Server product.

Threat actors have started exploiting critical-severity vulnerabilities in ServiceNow shortly after public disclosure.

The US is offering a reward of up to $10 million for information on Rim Jong Hyok, a member of the North Korean hacking...

The latest BIND security updates address remotely exploitable vulnerabilities leading to denial-of-service.

Stargazer Goblin has created a network of over 3,000 GitHub accounts to distribute malware through phishing repositories.

Google has announced improved protections for Chrome users when downloading files from the internet.

CISA warns of the in-the-wild exploitation of CVE-2024-39891, a Twilio Authy bug leading to the disclosure of phone number data.

Michigan Medicine is notifying roughly 57,000 individuals of a data breach impacting their personal and health information.

Verizon subsidiary TracFone Wireless settles for $16 million with the FCC over three old data breaches.

Chrome 127 was promoted to the stable channel with patches for 24 vulnerabilities, including 16 reported externally.

Canadian cybersecurity startup Protexxa closes a $10 million Series A funding round that brings the total raised to $15 million.

Google no longer plans on deprecating third-party cookies in Chrome and is working on an updated approach.

The EvilVideo zero-day vulnerability in Telegram for Android allowed threat actors to send malicious files disguised as videos.

Authorities in the UK infiltrated and disrupted the DDoS-for-hire service DigitalStress, and one suspect was arrested.

A Russian national and a dual Canadian and Russian national pleaded guilty in the US for roles in LockBit ransomware attacks.

US has announced sanctions against two CARR hacktivists for roles in cyberattacks targeting critical infrastructure.