Ionut Arghire

The Israeli cybersecurity startup plans to expand its offensive security offering to cover more enterprise attack surface.

The cybercrime groups tracked as UNC6040 and UNC6395 have been extorting organizations after stealing data from their Salesforce instances.

Two years after the fact, Fairmont Federal Credit Union tells customers their personal, financial, and medical information was compromised.

Reported by Meta and WhatsApp, the vulnerability leads to remote code execution and was likely exploited by a spyware vendor.

A deserialization of untrusted data in the MOM software allows attackers to achieve remote code execution.

Apple this year sent at least four rounds of notifications to French users potentially targeted by commercial spyware.

CISA says it is time for the CVE Program to focus on improving trust, responsiveness, and the caliber of vulnerability data.

Exploiting incomplete speculative execution attack mitigations extended to the branch predictor state, VMScape leaks arbitrary memory.

High-severity flaws in IOS XR could lead to ISO image verification bypass and denial-of-service conditions.

Google patched a critical use-after-free vulnerability in Chrome that could potentially lead to code execution.

The Akira ransomware group is likely exploiting a combination of three attack vectors to gain unauthorized access to vulnerable appliances.

Senator Ron Wyden’s complaints focus on Windows security and the Kerberoasting attack technique. 

AegisAI uses autonomous AI agents to prevent phishing, malware, and BEC attacks from reaching inboxes.

The investment will accelerate product innovation and will fuel the security company’s expansion in the US.

High-severity vulnerabilities could lead to remote code execution, privilege escalation, information disclosure, and configuration tampering.

Volodymyr Tymoshchuk allegedly hit hundreds of organizations with the LockerGoga, MegaCortex, and Nefilim ransomware families.

Designed to intercept cryptocurrency transactions, the malicious code reached 10% of cloud environments.

Hackers mount the host’s file system into fresh containers, fetch malicious scripts over the Tor network, and block access to the Docker API.

The critical-severity NetWeaver flaws could be exploited for remote code execution and privilege escalation.

In May 2024, hackers stole names, Social Security numbers, financial information, and protected health information from the hospital’s systems.