Ionut Arghire

Using social engineering, hackers compromised employee accounts with access to personal and health information.

The latest Zimbra refresh resolves command injection, XSS, restriction bypass, and SSRF security defects.

Attackers could send waves of malicious payloads to trigger buffer pre-allocations that are not freed, exhausting server memory.

Hackers stole names, addresses, Social Security numbers, credit/debit card numbers, and other information from a third-party management platform.

Targeting production infrastructure, the attack compromised internal datasets and service credentials.

The fresh security update resolves six critical and high-severity use-after-free vulnerabilities.

The startup helps organizations detect, hunt, and protect their assets across environments at machine speed.

The company disconnected its systems on July 13 and is starting to gradually restore operations.

The British firm has built a collaborative platform to help organizations address supply chain security risks.

The critical-severity security defect allows remote, authenticated attackers to execute arbitrary code on the server.

The company has yet to determine the full scope, nature, and impact of the incident.

The startup has built an AI-powered Identity Operating System that governs all identities across an organization’s environment.

The flaws could allow attackers to access credentials and data, take over accounts, and escalate their privileges.

Attackers could exploit the bugs to modify configurations, terminate or restart processes, cross security boundaries, leak memory, and execute code.

Signed by Microsoft, the vulnerable UEFI shim bootloaders could be abused on any system, regardless of the OS.

The researcher stripped the proof-of-concept (PoC) exploit to prevent immediate exploitation of the vulnerability.

An attacker can create a malicious repository containing a git.exe in the project root, and Cursor executes it automatically.

Three vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days.

A critical security defect in the ServiceNow AI platform could allow remote attackers to execute arbitrary code.

The company has rolled out a fix and is restoring access for Storage Zones Controller customers who apply it.