Ionut Arghire

Security researchers at Cisco Talos and Volexity flag two Pakistani espionage campaigns targeting Indian government entities.

Ascension says patient information was stolen in an early-May ransomware attack that involved an employee downloading malware.

CISA urges federal agencies to apply mitigations for an exploited Progress Telerik vulnerability as soon as possible.

YesWeHack has raised more than $52 million to date to build and market a crowdsourced vulnerability reporting platform.

Protect AI warns of a dozen critical vulnerabilities in open source AI/ML tools reported via its bug bounty program.

Life360 says hackers attempted to extort it after stealing personal information from a Tile customer support platform.

The City of Cleveland says emergency services, utilities, and airport are unaffected by a recent cyberattack.

Microsoft’s June 2024 Patch Tuesday updates resolve a zero-click Outlook vulnerability leading to remote code execution.

Fortinet has patched multiple vulnerabilities in FortiOS, including a high-severity code execution security flaw.

Google and Mozilla have released patches for 21 and 15 vulnerabilities in Chrome and Firefox, respectively.

The TellYouThePass ransomware gang started exploiting a recent code execution flaw in PHP days after public disclosure.

UK authorities have arrested two individuals for allegedly using a homemade mobile antenna to send mass text messages.

Redfox Security warns of multiple vulnerabilities in Netgear WNR614 routers discontinued three years ago.

SAP has released 10 new security notes on June 2024 Security Patch Day, including two addressing high-severity vulnerabilities.

Arm warns that CVE-2024-4610, a Mali GPU kernel driver vulnerability addressed two years ago, is exploited in attacks.

Mandiant says a financially motivated threat actor has compromised hundreds of Snowflake instances using customer credentials stolen via infostealer malware that infected non-Snowflake owned...

A critical vulnerability in the PyTorch distributed RPC framework could be exploited for remote code execution.

PHP has released patches for CVE-2024-4577, a critical vulnerability that could lead to arbitrary code execution on remote servers.

Nvidia patches multiple high-severity vulnerabilities in GPU display drivers and virtual GPU software.

The FCC proposes that broadband providers plan for BGP security and provide quarterly reports on implemented risk mitigations.