Ionut Arghire

Five Eyes cybersecurity agencies have released joint guidance on identifying Active Directory compromises.

US offers up to $10 million for information on Timur Shakhmametov, charging him with running the carding website Joker’s Stash.

Security researchers detail vulnerabilities in Kia owners’ portal that allowed them to control vehicles remotely.

Users continue to flame Kaspersky and Pango Group as the automatic, forced transition to UltraAV gradually progresses.

Cisco has released patches for seven high-severity vulnerabilities affecting products running IOS and IOS XE software.

Memory safety bugs in Android have decreased significantly as old code matures and new code uses memory-safe languages.

A malicious campaign is targeting transportation and logistics organizations in North America with various malware families.

HiddenLayer has discovered that Google Gemini for Workspace is prone to indirect prompt injection attacks.

Application security and vulnerability management platform DefectDojo has raised $7 million in Series A funding.

The India-linked threat actor SloppyLemming has been targeting government, law enforcement, and other entities in Pakistan.

ZDI offers over $1 million in cash and prizes at the next Pwn2Own Automotive hacking contest, set for January 2025 in Tokyo.

Iranian state-sponsored threat actor UNC1860 is operating as an initial access provider to high-profile networks in the Middle East.

MoneyGram’s money transfer services are down after the company took systems offline to contain a cyberattack.

Ransomware possibly involved in a cybersecurity incident at Arkansas City’s water treatment facility.

Many US users are voicing concerns over the silent, forced transition from Kaspersky’s security products to UltraAV.

The Necro trojan was found in two Android applications in Google Play with a combined downloads count of over 11 million.

ESET has released patches for two local privilege escalation vulnerabilities in security products for Windows and macOS.

Versa Networks has released patches for a Versa Director vulnerability for which proof-of-concept (PoC) code exists.

macOS Sequoia updates are causing cybersecurity software failures and breaking network connectivity for many.

Users can now save passkeys to Google Password Manager on computers running Windows, macOS, and Linux, in addition to Android devices.