Ionut Arghire

Attackers have been exploiting a second vulnerability in BeyondTrust’s remote management solutions, CISA warns.

Attackers are exploiting a critical vulnerability in Aviatrix Controller to execute arbitrary code in AWS cloud environments.

Infostealer malware allowed threat actors to compromise Telefonica employees’ credentials and access the company’s internal ticketing system.

A fake proof-of-concept (PoC) exploit for a recent LDAP vulnerability distributes information stealer malware.

Developed with the help of AI, the emerging FunkSec ransomware claimed over 80 victims in December 2024.

Juniper Networks has patched multiple high-severity vulnerabilities in Junos OS and its third-party components.

The latest version of the Banshee macOS information stealer no longer checks if the infected systems have the Russian language installed.

Substance abuse treatment provider BayMark Health Services says patient personal information was compromised in a data breach.

Fortinet warns of a phishing campaign that uses legitimate links to take over the victims’ PayPal accounts.

Threat actors are exploiting a recent GFI KerioControl firewall vulnerability that leads to remote code execution.

SonicWall has released patches for multiple vulnerabilities in SonicOS, including high-severity authentication bypass flaws.

Palo Alto Networks has released patches for multiple vulnerabilities in the Expedition migration tool, which was retired on December 31, 2024.

Excelsior Orthopaedics says the information of roughly 357,000 patients and employees was stolen in a June 2024 data breach.

Cybersecurity firms raised $9.5 billion in over 300 funding rounds in 2024, with Wiz scoring the largest investment at $1 billion.

CISA says two recently disclosed path traversal vulnerabilities in the Mitel MiCollab collaboration platform have been exploited in attacks.

Chrome and Firefox updates released this week resolve high-severity vulnerabilities in the two popular browsers.

This year’s first batch of monthly security updates for Android resolves 36 vulnerabilities, including critical remote code execution flaws.

MediaTek, HPE and Dell release advisories to inform customers about potentially serious vulnerabilities found and patched in their products.

Washington State Attorney General Bob Ferguson has filed a lawsuit against T-Mobile over a 2021 data breach that impacted over 76 million consumers.

CISA says no federal agencies other than Treasury were impacted by the recent compromise of a BeyondTrust cloud-based service.