Ionut Arghire

Six discontinued D-Link router models are affected by a remote code execution (RCE) vulnerability that will not be patched.

GitHub has launched a $1.25 million fund to be invested in improving the security of 125 open source projects.

Oracle has patched a high-severity information disclosure zero-day in Agile PLM that has been exploited in the wild.

Satellite maker Maxar Space Systems has disclosed a data breach impacting the personal information of its employees.

Evgenii Ptitsyn was extradited from South Korea to the US to face charges for his alleged involvement in administering the Phobos ransomware.

A threat actor tracked as Water Barghest has compromised over 20,000 IoT devices and monetizes them as residential proxies.

Cyberint has observed the Akira ransomware group leaking in a single day the information allegedly stolen from 32 victims.

A zero-day vulnerability affecting five discontinued GeoVision product models has been exploited by a botnet.

Great Plains Regional Medical Center says the personal information of 133,000 individuals was compromised in a ransomware attack.

EPA flags security vulnerabilities in more than 300 drinking water systems that serve roughly 110 million individuals.

The DeepData malware framework was seen exploiting a Fortinet VPN client for Windows zero-day that remains unpatched.

The Glove Stealer malware leverages a recently disclosed App-Bound encryption bypass method in attacks.

Threat actors have hijacked over 70,000 domains, including known brands and government entities, because of failed domain ownership verification.

Over 4 million WordPress websites were impacted by a critical Really Simple Security plugin vulnerability providing full administrative access.

The Chinese APT behind the LightSpy iOS backdoor has expanded its toolset with DeepData, a modular Windows-based surveillance framework.

Iran-linked Charming Kitten hackers have been running a ‘dream job’ campaign targeting the aerospace industry with the SnailResin malware.

Cyber risk management solutions provider Bitsight is acquiring threat intelligence firm Cybersixgill for $115 million.

CISA and the FBI have confirmed that Chinese hackers compromised the networks of telecommunications companies to spy on specific targets.

Robert Purbeck was sentenced to 10 years in prison for stealing the personal information of over 132,000 people.

The exploit for a new zero-day vulnerability in Windows is executed by deleting files, drag-and-dropping them, or right clicking on them.