Ionut Arghire

The company will invest in expanding its digital brand protection platform and in scaling its go-to-market efforts.

Because attacker-supplied flow data is used in public flows, the bug leads to unauthenticated remote code execution.

The company will invest in R&D, product expansion across AI frameworks, and in scaling go-to-market and sales efforts.

The company’s endpoint security platform monitors behavior and verifies user intent to stop cyberattacks in real time.

Latest ScreenConnect version adds encrypted storage and management to prevent unauthorized access to machine keys.

The information was stolen from a marketing tool after an employee fell victim to a targeted phone phishing attack.

Insufficient sanitization of CSS content within HTML emails leads to inline script execution when the message is opened in a browser.

Raven’s platform observes applications at runtime to detect anomalous behavior and prevent cyberattacks.

Targeting six iOS vulnerabilities and leading to full device compromise, the exploit chain is meant for surveillance.

The sanctions target two Chinese individuals, two Chinese companies, and one Iranian firm involved in hacking EU member states.

Focused on securing autonomous AI on endpoints, the startup will invest in product development.

The lightweight updates are meant to deliver security protections between security updates.

Anthropic, AWS, Google, Microsoft, and OpenAI fund the Linux Foundation’s long-term security initiatives focused on open source software.

The company says some of its internal business applications were accessed after an employee fell victim to a phishing attack.

The botnet has increased its activity, peaking at 15,000 exploitation attempts per day, and taking a more targeted approach.

The company plans to scale its products, expand to new markets, and grow its marketing and engineering teams.

Tracked as CVE-2025-47813, the flaw leads to the disclosure of the full local installation path of the application.

The attackers used a DKIM-signed phishing email, trusted redirect infrastructure, compromised servers, and Cloudflare-protected phishing pages, but the attack was unsuccessful.

The state-sponsored hackers deployed custom tools and stayed dormant in the compromised environments for months.

Storm-2561 is distributing fake VPN clients through SEO poisoning, deploying trojans, and stealing login information.