Ionut Arghire

Intrusion detection company Lumu has raised $30 million in a Series B funding round led by Forgepoint Capital.

Cisco has released patches for vulnerability in the GET VPN feature of IOS and IOS XE software that has been exploited in attacks.

Russian zero-day acquisition firm Operation Zero is now offering $20 million for full Android and iOS exploit chains.

Attackers can find tons of information on Tesla cars and their drivers by searching for misconfigured TeslaMate instances online.

Firefox 118 patches six high-severity vulnerabilities, including a memory leak potentially leading to sandbox escape.

Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions.

Google has released the source code of BinDiff, a binary file comparison tool popular within the security research community, on GitHub.

UAE-linked APT group Stealth Falcon has used the new Deadglyph backdoor in an attack targeting a governmental entity in the Middle East.

The Xenomorph Android banking trojan can now mimic financial institutions in the US and Canada and is also targeting crypto wallets.

Mixin Network suspends deposits and withdrawals after hackers steal $200 million in digital assets from its centralized database.

A stealthy APT known as Gelsemium has been observed targeting a government entity in Southeast Asia for persistence and intelligence collection.

Kosi Goodness Simon-Ebo, a Nigerian national, pleaded guilty in a US court to his involvement in a million-dollar BEC fraud scheme.

City of Dallas has approved an $8.5 million budget to restore systems following a Royal ransomware attack in May 2023.

A critical vulnerability in the TeamCity CI/CD server could allow unauthenticated attackers to execute code and take over vulnerable servers.

Canada’s largest airline says the personal information of some employees was accessed in a recent cyberattack.

The latest BIND security updates include patches for two high-severity DoS vulnerabilities that can be exploited remotely.

CISA says Known Exploited Vulnerabilities Catalog has helped federal agencies significantly accelerate their vulnerability remediation pace.

TransUnion denies suffering a breach after a hacker publishes 3GB of data allegedly stolen from the credit reporting firm.

Legit Security raises $40 million in a Series B funding round led by CRV to help organizations protect the software supply chain from attacks

Atlassian has released patches for multiple high-severity vulnerabilities in Jira, Confluence, Bitbucket, and Bamboo products.