Ionut Arghire

The FBI and CISA are warning critical infrastructure organizations of ongoing Snatch ransomware attacks, which also involve data exfiltration.

Finnish authorities have seized the drugs marketplace Piilopuoti, which has been operating on the Tor network since May 2022.

Policy management cybersecurity startup Discern Security on Tuesday emerged from stealth mode with $3 million in funding.

DHS has published a new set of recommendations to help federal agencies better report cyber incidents and protect critical infrastructure.

GitLab has released security updates to address a critical-severity vulnerability allowing an attacker to run pipelines as another user.

Data management startup Alcion has raised $21 million in a Series A funding round led by Veeam to expand its market presence.

New versions of Pakistan-linked APT Transparent Tribe’s CapraRAT Android trojan mimic the appearance of YouTube.

VulnCheck details a new fileless exploit targeting a recent Junos OS vulnerability that thousands of devices have not been patched against.

A Chinese threat actor has been observed targeting organizations in multiple industries to deploy web skimmers on online payment pages.

Google Chromebooks released from 2021 and onwards will receive automatic updates, including security patches, for 10 years.

The pro-Russian cybercrime group tracked as NoName057(16) is launching DDoS attacks against Canadian organizations.

Fortinet has released patches for a high-severity cross-site scripting vulnerability impacting its enterprise firewalls and switches.

CISA has released new guidance on how federal agencies can integrate identity and access management into their ICAM architecture.

Deduce has raised $9 million in a new funding round led by Freestyle Capital, to launch its AI-generated identity fraud prevention platform.

The financially motivated UNC3944 group that hacked MGM has hit at least 100 organizations, mainly in the US and Canada.

A high-severity vulnerability can be exploited to execute code remotely on any Windows endpoint within a Kubernetes cluster.

Orca Security details eight XSS vulnerabilities in Azure HDInsight that could lead to information leaks, session hijacking, and payload delivery.

A LockBit affiliate has deployed the new 3AM ransomware family on a victim’s network, after LockBit’s execution was blocked.

North Korean hackers stole $53 million in cryptocurrency from crypto exchange CoinEx after the hot wallet private key was leaked.

The US Department of Energy gives $39 million in funding for nine projects to advance the cybersecurity of distributed energy resources.