Ionut Arghire

Center for Vein Restoration discloses data breach impacting the personal, medical, and financial information of 446,000 individuals.

Ivanti has released patches for critical vulnerabilities in Cloud Services Application, Connect Secure, and Policy Secure.

SAP has released patches for 16 vulnerabilities, including a critical-severity SSRF bug in NetWeaver (Adobe Document Services).

Microsoft offers $10,000 in rewards to researchers who can manipulate a realistic simulated LLM-integrated email client.

Microsoft has rolled out new default security protections that mitigate NTLM relaying attacks across on-premises Exchange, AD CS, and LDAP services.

Radiant Capital says a North Korean threat actor stole $50 million in assets in a sophisticated October attack.

Medical devices manufacturer Artivion says a ransomware attack caused disruptions to order and shipping processes.

QNAP has released patches for multiple high-severity QTS and QuTS Hero vulnerabilities disclosed at the Pwn2Own Ireland 2024 hacking contest.

Belgian and Dutch authorities arrested eight individuals for their alleged involvement in phishing, online scams, and money laundering operations.

Anna Jaques Hospital says the personal information of over 316,000 individuals was compromised in a year-old data breach.

Data privacy solutions provider Ethyca has raised $10 million in a funding round led by Aspenwood Ventures and AVP.

SonicWall has released patches for multiple high-severity flaws in the SMA100 SSL-VPN secure access gateway.

Google has announced the open source availability of Vanir, a patch validation tool for Android platform developers.

WatchTowr has published proof-of-concept (PoC) code for an unpatched vulnerability in the Mitel MiCollab enterprise collaboration platform.

A critical directory traversal vulnerability in the SailPoint IdentityIQ IAM platform exposes restricted files to attackers.

The newly discovered DroidBot Android trojan targets 77 banks, cryptocurrency exchanges, and national organizations.

More than 100 Cisco products are affected by an NX-OS vulnerability that allows attackers to bypass image signature verification.

Development firm Chemonics International has disclosed a year-old data breach impacting over 260,000 people.

Veeam releases patches for two vulnerabilities in Service Provider Console, including a critical-severity remote code execution bug.

A second vulnerability in Zyxel firewalls has been exploited in Helldown ransomware attacks over the past weeks.