Ionut Arghire

The DeepData malware framework was seen exploiting a Fortinet VPN client for Windows zero-day that remains unpatched.

The Glove Stealer malware leverages a recently disclosed App-Bound encryption bypass method in attacks.

Threat actors have hijacked over 70,000 domains, including known brands and government entities, because of failed domain ownership verification.

Over 4 million WordPress websites were impacted by a critical Really Simple Security plugin vulnerability providing full administrative access.

The Chinese APT behind the LightSpy iOS backdoor has expanded its toolset with DeepData, a modular Windows-based surveillance framework.

Iran-linked Charming Kitten hackers have been running a ‘dream job’ campaign targeting the aerospace industry with the SnailResin malware.

Cyber risk management solutions provider Bitsight is acquiring threat intelligence firm Cybersixgill for $115 million.

CISA and the FBI have confirmed that Chinese hackers compromised the networks of telecommunications companies to spy on specific targets.

Robert Purbeck was sentenced to 10 years in prison for stealing the personal information of over 132,000 people.

The exploit for a new zero-day vulnerability in Windows is executed by deleting files, drag-and-dropping them, or right clicking on them.

Most of the top frequently exploited vulnerabilities in 2023 were initially exploited as zero-days, according to data from government agencies.

Ivanti has released fixes for dozens of vulnerabilities in Endpoint Manager, Avalanche, Connect Secure, Policy Secure, and Secure Access Client.