Thousands of code repositories were found exposed in over one hundred Docker registries that are accessible from the Internet without authentication, Palo Alto Network...
Hi, what are you looking for?
SecurityWeek
The City of North Miami Beach last week announced that ransomware was found on computers within its police department’s network.The attack was discovered on...
Over the course of 2019, Facebook paid security researchers a total of $2.2 million in rewards for vulnerability reports submitted to the social media...
In an attempt to improve the security of its users, the Chrome browser will soon start blocking insecure downloads on HTTPS pages, Google announced.The...
More than 80 percent of organizations impacted by CVE-2019-19781, a critical vulnerability in the Citrix Application Delivery Controller (ADC) and Gateway, have already taken...
One of the security flaws that Google addressed with the February 2020 set of Android patches is a critical vulnerability in Bluetooth that could...
Malicious optimizer, booster, and utility applications hosted on Google Play gathered nearly half a million downloads before being taken down, Trend Micro reports.
The Iran-linked threat group know as "Charming Kitten" has been targeting journalists, political and human rights activists in a new campaign aimed at stealing...
A vulnerability in the Realtek HD Audio Driver package could be abused to execute arbitrary payloads with elevated privileges on a vulnerable machine, SafeBreach...
Google this week released Chrome 80 to the stable channel with 56 vulnerability patches and various other improvements to user security.
A bug in the Google Takeout download service has resulted in some users’ videos being inadvertently shared with other people.
Facebook has patched a vulnerability in WhatsApp Desktop that could allow an attacker to launch cross-site scripting (XSS) attacks and access files from the...
Google this week released the February 2020 set of security updates for the Android operating system, which address a total of 25 vulnerabilities, including...
Vulnerabilities recently patched in Mini-SNMPD could be abused for denial-of-service (DoS) attacks or to obtain sensitive information, Cisco Talos’ security researchers report.
Twitter on Monday announced that it has suspended a large number of fake accounts that had exploited an API vulnerability to match usernames to...
Hackers are actively targeting a vulnerability in Linear eMerge E3 access controllers to infect the devices with malware and abuse them to launch distributed...
Six individuals were arrested in the United Kingdom last week for their involvement in a bank cyber-heist and money laundering operation.
The China-linked threat group tracked as Winnti was observed using a new variant of the ShadowPad backdoor in recent attacks targeting Hong Kong universities,...
Japanese IT and electronics company NEC Corporation has revealed that hackers had access to its network for a long time, but the incident occurred...
A newly launched project wants to help inform IT security representatives and domain owners when their users fall victim to phishing.
Malware & Threats
The attackers had access to a senior executive’s email account for 150 days and exfiltrated data for months.
Vulnerabilities
Artificial Intelligence
Artificial Intelligence
Supply Chain Security
Vulnerabilities
The high-severity flaw can be exploited remotely, without authentication, in server-side request forgery (SSRF) attacks.
Vulnerabilities
Artificial Intelligence
Artificial Intelligence
