Latest News

The DDoS attack caused a major outage, but Mastodon mitigated it within a few hours.

British businesses need to prepare themselves to defend against cyberattacks because the U.K. could be targeted “at scale,” if it became involved in an international conflict.

Dubbed Lotus Wiper, the malware targets recovery mechanisms, overwrites drives, and systematically deletes files.

The exploitation of the command injection vulnerability started one year after public disclosure and PoC exploit code publication.

Researcher says the missing piece is a governance-driven intelligence layer that turns SBOM and VEX data into explainable security decisions.

All the flaws could have also been found by an elite human researcher, according to Mozilla.

The campaigns focus on financial organizations, including cryptocurrency, venture capital, and blockchain entities.

Researchers discovered a remote code execution vulnerability and cybercriminals are using its reputation to deliver malware.

The company released 481 new security patches across 28 product families, including over 300 fixes for remotely exploitable, unauthenticated flaws.

Angelo Martino of Florida has pleaded guilty to collaborating with the BlackCat cybercrime group while working as a ransomware negotiator.

Masquerading as popular cryptocurrency wallets, the apps can hijack recovery phrases and private keys.

Things are improving, but a researcher has still identified over 1,500 Perforce P4 instances allowing attackers to read files on the server.

The security defects could be exploited for remote code execution, OS command injection, and WAF detection bypass.

CISA expanded the KEV catalog with eight flaws, but five of them have been flagged as exploited before.

Data breaches were disclosed by Southern Illinois Dermatology, Saint Anthony Hospital, and North Texas Behavioral Health Authority.