Ionut Arghire

A Pyongyang-aligned APT was caught exploiting a recent zero-day in Internet Explorer in a supply chain attack.

North Korean nationals posing as IT workers have been extorting their employers after gaining insider access.

Omni Family Health has disclosed a data breach impacting nearly 470,000 current and former patients and employees.

CISA and the FBI are requesting public comment on new guidance regarding risky software security bad practices.

F5 has released patches for a high-severity elevation of privilege vulnerability in BIG-IP and a medium-severity bug in BIG-IQ.

Cisco has released patches for multiple vulnerabilities in ATA 190 series firmware, including two high-severity flaws.

Iranian threat actors use brute force techniques in attacks against critical infrastructure organizations, the US, Australia, and Canada warn.

Google has released Android 15 with new security features to keep devices and sensitive applications better protected.

Google has released Chrome 130 in the stable channel to resolve 17 vulnerabilities, including 13 reported by external researchers.

CISA warns that a critical-severity hardcoded credentials vulnerability in SolarWinds Web Help Desk is exploited in attacks.

Oracle has released 334 new security patches to address roughly 220 unique CVEs as part of its October 2024 Critical Patch Update.

A critical-severity flaw in GitHub Enterprise Server could lead to unauthorized access to the vulnerable instances.

Splunk has released patches for multiple vulnerabilities in Splunk Enterprise, including two high-severity remote code execution flaws.

Automattic has rolled out updates for 101 Jetpack versions released over the past eight years to resolve a critical vulnerability.

Entry points in packages across multiple programming languages are susceptible to exploitation in supply chain attacks.

Gryphon Healthcare and Tri-City Medical Center have disclosed data breaches collectively impacting over 500,000 individuals.

The Iran-linked APT OilRig has intensified cyber operations against the United Arab Emirates and the broader Gulf region.

Juniper Networks has announced patches for dozens of vulnerabilities in Junos OS, Junos OS Evolved, and third-party components.

Tor browser version 13.5.7 is rolling out with patches for an exploited zero-day vulnerability recently addressed in Firefox.

HiddenLayer details ShadowLogic, a new method of creating codeless backdoors in AI models by manipulating their graphs.