Ionut Arghire

Apple this year sent at least four rounds of notifications to French users potentially targeted by commercial spyware.

CISA says it is time for the CVE Program to focus on improving trust, responsiveness, and the caliber of vulnerability data.

Exploiting incomplete speculative execution attack mitigations extended to the branch predictor state, VMScape leaks arbitrary memory.

High-severity flaws in IOS XR could lead to ISO image verification bypass and denial-of-service conditions.

Google patched a critical use-after-free vulnerability in Chrome that could potentially lead to code execution.

The Akira ransomware group is likely exploiting a combination of three attack vectors to gain unauthorized access to vulnerable appliances.

Senator Ron Wyden’s complaints focus on Windows security and the Kerberoasting attack technique. 

AegisAI uses autonomous AI agents to prevent phishing, malware, and BEC attacks from reaching inboxes.

The investment will accelerate product innovation and will fuel the security company’s expansion in the US.

High-severity vulnerabilities could lead to remote code execution, privilege escalation, information disclosure, and configuration tampering.

Volodymyr Tymoshchuk allegedly hit hundreds of organizations with the LockerGoga, MegaCortex, and Nefilim ransomware families.

Designed to intercept cryptocurrency transactions, the malicious code reached 10% of cloud environments.

Hackers mount the host’s file system into fresh containers, fetch malicious scripts over the Tor network, and block access to the Docker API.

The critical-severity NetWeaver flaws could be exploited for remote code execution and privilege escalation.

In May 2024, hackers stole names, Social Security numbers, financial information, and protected health information from the hospital’s systems.

The attacker deployed multiple malware families, including two backdoors and a proxy tunneller, and various reconnaissance tools.

Hackers accessed emails, usernames, password hashes, and authentication data stored in a Plex database.

PromptLock is only a prototype of LLM-orchestrated ransomware, but hackers already use AI in file encryption and extortion attacks.

The list of impacted cybersecurity firms has been expanded to include BeyondTrust, Bugcrowd, CyberArk, Cato Networks, JFrog, and Rubrik.

The private repositories of hundreds of organizations were published publicly in the second phase of the Nx supply chain attack.