Ionut Arghire

A critical flaw in Cisco Unified Communications and Contact Center Solutions products could lead to remote code execution.

Over 5,000 GitLab servers have yet to be patched against CVE-2023-7028, a critical password reset vulnerability.

Updates released for Firefox and Thunderbird resolve 15 vulnerabilities, including five high-severity bugs.

Attackers could take over a Kubernetes cluster if access privileges are granted to all authenticated users in Google Kubernetes Engine.

PoC code exploiting a critical Fortra GoAnywhere MFT vulnerability gets published one day after public disclosure.

Jason’s Deli says hackers targeted users in credential stuffing attacks, likely compromising their personal information.

Google releases Chrome 121 to the stable channel with 17 security fixes, including 11 reported by external researchers.

Hackers could exploit Lamassu Douro ATM vulnerabilities to take over devices, steal bitcoin from users.

AI testing platform RagaAI raises $4.7 million in seed funding to help identify AI issues and improve security and reliability.

The latest Splunk Enterprise releases patch multiple vulnerabilities, including a high-severity flaw in the Windows version.

AerCap, the largest aviation leasing company in the world, was hit by a ransomware attack on January 17th.

SEC says hackers used SIM swapping to take over its X (formerly Twitter) account on January 9.

Conor Brian Fitzpatrick, the owner of the cybercrime website BreachForums, was sentenced to time served and supervised release.

CVE-2023-34048, a vCenter Server vulnerability patched in October 2023, had been exploited as zero-day for a year and a half.

Security researchers flag multiple severe vulnerabilities in open source AI/ML solutions MLflow, ClearML, Hugging Face.

Apparel and footwear brands owner VF Corp shares more details on the impact of a December 2023 ransomware attack.

CISA, FBI and EPA document aims to help water and wastewater organizations improve their cyber resilience and incident response.

Kusari has raised $8 million to help organizations gain visibility into and secure their software supply chain.

Organizations can earn up to $3 million in federal funding for cyber tools securing the clean energy infrastructure.

Naz.API credential stuffing list containing 70 million unique email addresses and old passwords found on hacking forum.