Ionut Arghire

Romanian hospitals turn to pen and paper after ransomware attack on centralized healthcare management system.

ExpressVPN disables split tunneling on Windows after learning that DNS requests were not properly directed.

A possibly China-linked threat actor uses a custom backdoor in a cyberespionage campaign ongoing since at least 2021.

Organizations urged to hunt for potential compromise as exploitation of a recent Ivanti enterprise VPN vulnerability begins.

Written in Rust, the new RustDoor macOS backdoor appears linked to Black Basta and Alphv/BlackCat ransomware.

An XXE flaw in Ivanti Connect Secure, Ivanti Policy Secure, and ZTA gateways could lead to unauthenticated access to resources.

One year after taking down Hive ransomware, US announces a $10 million reward for information on the group’s key members.

Iran’s offensive cyber operations against Israel went from chaotic in October 2023 to targeting new geographies a month later.

Two critical vulnerabilities in Cisco Expressway series devices can be exploited in CSRF attacks without authentication.

Google Play Protect will block the installation of sideloaded applications requesting permissions frequently abused by fraudsters.

A critical remote code execution vulnerability in Shim could allow attackers to take over vulnerable Linux systems.

Verizon is notifying 63,206 employees that their personal information was exposed in an internal data breach.

JetBrains releases patches for a critical-severity TeamCity authentication bypass leading to remote code execution.

Two critical OS command injection flaws in FortiSIEM could allow remote attackers to execute arbitrary code.

The Linux Foundation, AWS, Cisco, IBM, and other tech companies establish the Post-Quantum Cryptography Alliance.

The ResumeLooters hackers compromise recruitment and retail websites using SQL injection and XSS attacks.

Canon announces patches for seven critical-severity remote code execution flaws impacting small office printer models.

Android’s February 2024 security patches resolve 46 vulnerabilities, including a critical remote code execution bug.

Google announces $1 million investment in improving Rust’s interoperability with legacy C++ codebases.

Two high-severity vulnerabilities in QNAP’s operating system could lead to command execution over the network.