Ionut Arghire

GitHub beefs up its secret scanning feature, now allowing users to check the validity of exposed credentials for major cloud services.

ICRC is telling hacktivists involved in conflict during war to avoid targeting civilian objectives and hospitals, or making threats of violence.

New US government guidance details the challenges that application developers and vendors face in identity and access management (IAM).

Threat actor uses typosquatting to trick hundreds of users into downloading a malicious NPM package that delivers the r77 rootkit.

Supermicro has released BMC IPMI firmware updates to address multiple vulnerabilities impacting select motherboard models.

A local privilege escalation vulnerability (CVE-2023-4911) in the GNU C Library (glibc) can be exploited to gain full root privileges.

Google and Yahoo are introducing new requirements for bulk senders, to improve phishing and spam protections.

An open redirection vulnerability in the popular job search platform Indeed has been exploited in a series of phishing attacks.

Fortinet warns of multiple malicious NPM packages that include install scripts designed to steal sensitive information.

Motel One says customer addresses and credit card information were compromised in a recent ransomware attack.

The October 2023 security update for Android patches two vulnerabilities exploited in attacks, both likely linked to spyware vendors.

Hackers stole a database containing the list of the European Telecommunications Standards Institute’s online users.

DHS is reportedly investigating the impact of the recent Johnson Controls ransomware attack on its systems and facilities.

CISA has announced the Secure Our World cybersecurity awareness program, targeting both businesses and end users.

Silverfort has released the source code for its lateral movement detection tool LATMA, to help identify and analyze intrusions.

Nexusflow scores funding to build an open-source LLM that can deliver high accuracy when retrieving data from multiple security sources.

A group of academic researchers devised a technique to extract sounds from still images captured using smartphone cameras with rolling shutter and movable lens...

Hackers have set their sights on CVE-2023-34468, an RCE vulnerability in Apache NiFi that impacts thousands of organizations. 

Gaps in Cloudflare’s security controls allow users to bypass protections and target others from the platform itself.

The FBI warns organizations of cyberattacks that employ multiple ransomware families or deploy dormant data wipers.