Ionut Arghire

The notorious ShinyHunters extortion group leaked over 42 million records allegedly stolen from Charter in April.

MokN's platform deploys realistic decoy access points to lure attackers into revealing compromised credentials, enabling organizations to respond before abuse occurs.

The critical-severity issue, assigned a CVSS score of 9.4, is an argument injection flaw that can be exploited by authenticated attackers via pull requests...

The browser update resolves critical-severity security defects that could potentially lead to remote code execution.

The funding round was led by Balderton Capital, with additional support from Crosspoint Capital and previous investors General Catalyst and Ten Eleven Ventures.

Data breach leaves nearly 6 million Carnival customers navigating identity theft risks.

Delivered via phishing lures, the malware combines financial theft with data exfiltration and remote access.

Fortinet rolled out hotfixes for the security defect in April, warning that it had been exploited in the wild as a zero-day and urging...

The security flaw allowed attackers to pull private container images, exposing source code, credentials, and infrastructure.

New AI Threat Defense platform combines capabilities from Mandiant, Wiz and Gemini to help customers fight AI with AI.

Using an AI model called BinNet, RevEng hunts vulnerabilities and backdoors in released software binaries.

Security firms took down all four command-and-control (C&C) channels used by the GlassWorm malware.

The FBI has issued an alert warning of Silent Ransom Group attacks targeting law firms.

Resolved last week, the vulnerability was exploited in the wild as a zero-day to execute scripts with root privileges.

Nimbus Manticore has continued its operations during and after the US military campaign against Iran.

The allegedly stolen information leaked by ShinyHunters contains email addresses, names, addresses, and dates of birth.

Hardcoded machineKey values in a configuration file enabled ViewState deserialization attacks leading to remote code execution.

The two own Dutch companies that allegedly provided bulletproof hosting services to Russia-aligned threat actors.

Threat actors stole files containing names and protected health information from the healthcare organization’s systems.

Published within a 15-minute window, the malicious tags introduced backdoors to exfiltrate CI secrets.