Ionut Arghire

The personal information of roughly 10 million individuals might have been compromised in a data breach at French unemployment agency Pole Emploi.

QakBot, SocGholish, and Raspberry Robin are the three most popular malware loaders, accounting for 80% of the observed incidents.

Personal information stolen in ransomware attack at Ohio History Connection posted online after organization refuses to pay ransom.

North Korea-linked Lazarus Group exploited a ManageEngine vulnerability to compromise an internet backbone infrastructure provider.

Israeli startup Cypago raises $13 million in funding and launches a governance, risk management and compliance (GRC) automation platform.

Google has announced new AI-powered zero trust, digital sovereignty, and threat defense controls for Workspace customers.

University of Minnesota confirms data was stolen from its systems, says no malware infection or file encryption has been identified.

Cisco has released patches for three high-severity vulnerabilities in NX-OS and FXOS software that could lead to denial-of-service (DoS) conditions.

The FBI says that the patches Barracuda released in May for an exploited ESG zero-day vulnerability (CVE-2023-2868) were not effective.

Account takeover and fraud protection firm SpyCloud has raised $110 million in a growth funding round led by Riverwood Capital.

Danish cloud hosting provider CloudNordic says most customers lost all data after ransomware shut down all its systems and servers.

The FBI has published information on six crypto wallets in which North Korean hackers moved roughly 1,580 Bitcoin from various heists.

More than 3,000 Openfire servers are not patched against a recent vulnerability and are exposed to attacks employing a new exploit.

CISA, NSA, and NIST urge organizations to create quantum-readiness roadmaps and prepare for post-quantum cryptography migration.

Google has released the first weekly Chrome security update, which patches five memory safety vulnerabilities, including four rated ‘high severity’.

Vulnerabilities in the TP-Link Tapo L530E smart bulb and accompanying mobile application can be exploited to obtain the local Wi-Fi password.

The threat actor behind HiatusRAT was seen performing reconnaissance against a US military procurement system in June 2023.

A new APT group called Carderbee has been observed deploying the PlugX backdoor via a supply chain attack targeting organizations in Hong Kong.

Cerby has raised $17 million in Series A funding for its access management platform for applications not supported by identity providers.

Cyfirma security researchers uncover the real identity of the CypherRAT and CraxsRAT malware developer and MaaS operator.