Ionut Arghire

Google has released patches for 14 high-severity vulnerabilities as part of Android’s December 2024 security update.

Supply chain attack leads to decentralized application developers downloading backdoored versions of the Solana Web3.js library.

The European Union has adopted new legislation to establish a cybersecurity shield and ensure adequate security standards for managed security services.

A hacker has posted online over 760,000 records belonging to employees of Bank of America, Koch, Nokia, JLL, Xerox, Morgan Stanley, and Bridgewater.

Hackers have caused close to $1.49 billion in cryptocurrency losses this year, with $71 million worth of assets stolen in November.

Energy sector contractor ENGlobal Corporation has restricted access to some of its systems in response to a ransomware attack.

AWS has launched Security Incident Response, a new service for quick and efficient security event management.

A critical-severity vulnerability in open source enterprise network monitoring tool Zabbix could lead to full system compromise.

Alder Hey Children’s Hospital and Wirral University Teaching Hospital have fallen victim to cyberattacks, including one involving ransomware.

VulnCheck warns of widespread exploitation of a year-and-a-half-old ProjectSend vulnerability for which multiple public exploits exist.

US senators introduce new legislation to protect health data and strengthen the cybersecurity of the country’s healthcare sector.

The Russia-linked RomCom APT has been observed chaining two zero-days in Firefox and Windows for backdoor delivery.

IBM has released patches for two high-severity remote code execution vulnerabilities in Data Virtualization Manager and Security SOAR.

CISA warns about attacks exploiting CVE-2023-28461, a critical vulnerability in Array Networks AG and vxAG secure access gateways.

New York has announced $11 million settlements with Geico and Travelers over data breaches affecting 120,000 people.

Two vulnerabilities in the Anti-Spam by CleanTalk WordPress plugin allowed attackers to execute arbitrary code remotely.

A ransomware group has been observed exploiting a recently patched command injection vulnerability in Zyxel firewalls for initial access.

San Francisco-based third-party risk management provider Viso Trust has raised $7 million in venture funding.

The North Korean fake IT workers have infiltrated businesses in China, Russia, and other countries aside from the US.

The SafePay ransomware group claims to have stolen over 1 terabyte of data from vehicle tracking solutions provider Microlise.