Ionut Arghire

The vulnerabilities could be exploited to cause a denial-of-service (DoS) condition, execute arbitrary code, or access arbitrary files and directories.

APT24 has been relying on various techniques to drop the BadAudio downloader and then deploy additional payloads.

The company has operated in stealth mode for four months and has signed dozens of customers, including eight unicorns.

The infamous ShinyHunters hackers have targeted customer-managed Gainsight-published applications to steal data from Salesforce instances.

The AI-native social engineering defense (SED) platform will accelerate product innovation and expand its offerings.

A Chinese threat actor is exploiting known vulnerabilities in discontinued Asus devices in an Operational Relay Box (ORB) facilitation campaign.

Media Land, Hypercore, and their leadership and employees are allegedly connected to various cybercriminal activities.

A proof-of-concept (PoC) exploit targeting the high-severity remote code execution (RCE) bug exists.

The cybersecurity company has launched Digital Security Teammate (DST), AI agents that investigate, triage, and escalate incidents when needed.

The cybersecurity startup will use the funds to expand its engineering team, extend collaborations, and get ready for enterprise rollout.

Threat actors are abusing Ray’s lack of authentication to compromise exposed clusters and deploy LLM-generated payloads and cryptocurrency miners.

An OS command injection flaw, the exploited zero-day allows attackers to execute arbitrary code on the underlying system.

The company will use the investment to accelerate product development, expand go-to-market operations, and hire new talent.

The fresh investment will be used to accelerate product innovation and to expand the company’s go-to-market efforts.

Hackers accessed a database containing information about alumni, donors, faculty, students, parents, and other individuals.

A threat actor exploited a vulnerability, exfiltrated data, and attempted to extort Eurofiber.

The flaw was reported by Google's Threat Analysis Group and was likely exploited by a commercial spyware vendor.

The state-sponsored APT has been targeting the victims’ family members to increase pressure on their targets.

Names, addresses, email addresses, and phone numbers were compromised after an employee fell for a social engineering attack.

The exploitation of the recent XWiki vulnerability has expanded to botnets, cryptocurrency miners, scanners, and custom tools.