Ionut Arghire

European password management startup Uniqkey has raised €5.35 million (~$5.9 million) from BackingMinds.

Threat actors are abusing the Microsoft Sway service to host phishing pages leveraged in QR phishing attacks targeting Office 365 users.

Iranian state-sponsored APT Lemon Sandstorm is working closely with ransomware groups on monetizing network intrusions.

Google has significantly increased the rewards for Chrome browser vulnerabilities, offering up to $250,000 for remote code execution bugs.

The US government is offering a $2.5 million reward for information leading to the arrest of malware distributor Volodymyr Kadariya.

The personal information of over 950,000 people was compromised in a BlackSuit ransomware attack on Young Consulting.

The IT and data security firm raises $319 million in a Series E round led by Google Ventures and is now valued at $3.5...

A critical vulnerability in the WPML WordPress plugin could allow a remote attacker to execute arbitrary code on the server.

The Port of Seattle, including the SEA Airport, is experiencing system outages likely caused by a cyberattack.

Google flags another high-severity vulnerability patched with the latest Chrome 128 release as exploited in the wild.

Complaint alleges that defendants submitted a false and fraudulent cybersecurity assessment score.

The personal information of 500,000 Texas Dow Employees Credit Union members was compromised in the MOVEit hack last year.

The American Radio Relay League (ARRL) says it paid out a $1 million ransom after falling victim to ransomware in May 2024.

Government agencies in the US and allied countries have released guidance on how organizations can define a baseline for event logging best practices.

Audit finds weaknesses in FBI’s inventory management and disposition procedures for drives containing sensitive information.

Deniss Zolotarjovs was charged in a US court for extorting victims and laundering cryptocurrency as part of the Karakurt cyber extortion group.

SolarWinds has issued a second Web Help Desk hotfix to remove hardcoded credentials after patching a critical-severity vulnerability last week.

Atlassian has released patches for nine high-severity vulnerabilities in Bamboo, Confluence, Crowd, and Jira products.

CISA warns that attackers are exploiting two critical-severity authentication bypass vulnerabilities impacting multiple Dahua products.

A high-severity vulnerability in Cisco Unified CM and Unified CM SME could allow attackers to cause a denial-of-service (DoS) condition.