Ionut Arghire

Terrance Michael Ciszek is charged with buying stolen account credentials from the Genesis Market dark web marketplace.

A zero-day vulnerability in Samsung mobile processors has been abused as part of an exploit chain for arbitrary code execution.

The Cicada3301 ransomware shows multiple similarities with BlackCat and is believed to mark the reemergence of the threat.

New malicious campaign suggests the Bumblebee malware loader might be resurfacing following the May 2024 law enforcement takedown.

More than 460 products and services are covered under Google Cloud’s new VRP, with 140 eligible for top tier bug bounty rewards.

Atlassian has released patches for high-severity vulnerabilities in Bitbucket, Confluence, and Jira Service Management.

Electric motor manufacturer Nidec confirms business and internal documents were stolen in a ransomware attack.

An XSS vulnerability in Roundcube Webmail has been targeted for code execution against a governmental organization in a CIS country.

The Adload macOS adware potentially exploits a privacy bypass vulnerability resolved in Sequoia 15 last month.

A Pyongyang-aligned APT was caught exploiting a recent zero-day in Internet Explorer in a supply chain attack.

North Korean nationals posing as IT workers have been extorting their employers after gaining insider access.

Omni Family Health has disclosed a data breach impacting nearly 470,000 current and former patients and employees.

CISA and the FBI are requesting public comment on new guidance regarding risky software security bad practices.

F5 has released patches for a high-severity elevation of privilege vulnerability in BIG-IP and a medium-severity bug in BIG-IQ.

Cisco has released patches for multiple vulnerabilities in ATA 190 series firmware, including two high-severity flaws.

Iranian threat actors use brute force techniques in attacks against critical infrastructure organizations, the US, Australia, and Canada warn.

Google has released Android 15 with new security features to keep devices and sensitive applications better protected.

Google has released Chrome 130 in the stable channel to resolve 17 vulnerabilities, including 13 reported by external researchers.

CISA warns that a critical-severity hardcoded credentials vulnerability in SolarWinds Web Help Desk is exploited in attacks.

Oracle has released 334 new security patches to address roughly 220 unique CVEs as part of its October 2024 Critical Patch Update.