Ionut Arghire

A code reuse issue enabled comma characters in certificate principals to be interpreted as list separators.

The threat actor infected victims with the Snow malware family – Snowbelt, Snowglaze, and Snowbasin – for persistent access.

A race condition in PackageKit allows unprivileged users to escalate privileges when installing packages.

Dubbed GopherWhisper, the group relies on multiple Go-based backdoors alongside custom loaders and injectors.

It targeted high-precision calculation software to tamper with results and packed a self-propagation mechanism.

The malware provides remote access and control of infected devices and maintains post-patching persistence.

Tied to a fresh Checkmarx supply chain attack claimed by TeamPCP, the incident references the Shai-Hulud worm.

The company will use the investment to accelerate product development and grow go-to-market efforts.

The company will hire new talent and expand operations across the US and other allied countries.

The company is notifying My Rituals members that hackers downloaded part of their data, including names and addresses.

Apple rolled out the security patches for dozens of iPhone and iPad models and generations.

The flaw allows attackers to access the SAM database, extract NTLM hashes, and gain System privileges.

Dubbed Lotus Wiper, the malware targets recovery mechanisms, overwrites drives, and systematically deletes files.

The exploitation of the command injection vulnerability started one year after public disclosure and PoC exploit code publication.

The campaigns focus on financial organizations, including cryptocurrency, venture capital, and blockchain entities.

The company released 481 new security patches across 28 product families, including over 300 fixes for remotely exploitable, unauthenticated flaws.

Masquerading as popular cryptocurrency wallets, the apps can hijack recovery phrases and private keys.

The security defects could be exploited for remote code execution, OS command injection, and WAF detection bypass.

CISA expanded the KEV catalog with eight flaws, but five of them have been flagged as exploited before.

The hackers targeted LayerZero’s DVN, compromising certain RPCs and DDoSing others to trigger failover to the poisoned infrastructure.