Cyberwarfare
The vulnerability, tracked as CVE-2025-2783, was chained with a second exploit for remote code execution in attacks targeting organizations in Russia.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Hacker Conversations
Frank Trezza is fairly typical of most hackers. Early pranks sometimes leading to something more serious.
Cloud Security
Critical remote code execution vulnerabilities found by Wiz researchers in Ingress NGINX Controller for Kubernetes.
Government
The FCC is investigating whether Chinese firms such as Huawei, ZTE and China Telecom are still operating in the US.
Supply Chain Security
More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.
Mobile & Wireless
Attacks involving Paragon’s Graphite spyware involved a WhatsApp zero-day that could be exploited without any user interaction.
Cloud Security
News analysis: Google positions itself to compete with Microsoft for enterprise security dollars. How does this deal affect startup ecosystem?
Phishing
A long-running campaign phishing for credentials through scareware recently switched to targeting macOS users.
Funding/M&A
Google has confirmed reports that it’s buying cloud security giant Wiz and says it’s prepared to pay $32 billion in cash.
Artificial Intelligence
A year-old vulnerability in a third-party ChatGPT tool is being exploited against financial entities and US government organizations.
Artificial Intelligence
Vulnerabilities in Nvidia Riva could allow hackers to abuse speech and translation AI services that are typically expensive.
Application Security
The tj-actions/changed-files GitHub Action, which is used in 23,000 repositories, has been targeted in a supply chain attack.
Ransomware
The newly discovered SuperBlack ransomware has been exploiting two vulnerabilities in Fortinet firewalls.
Ransomware
CISA, FBI, and MS-ISAC warn of Medusa ransomware attacks targeting critical infrastructure organizations.
ICS/OT
Dragos case study reveals that Volt Typhoon hacked the US electric grid and stole information on OT systems.
Vulnerabilities
Microsoft on Tuesday patched a zero-day vulnerability in the Windows Win32 kernel that has been exploited since March 2023.
Malware & Threats
Redmond ships major security updates with warnings that a half-dozen Windows vulnerabilities have already been exploited in the wild.
Data Breaches
Several healthcare organizations in different US states have disclosed data breaches affecting 100,000-200,000 individuals.
IoT Security
Multiple Mirai-based botnets are exploiting CVE-2025-1316, an Edimax IP camera vulnerability that allows remote command execution.
Vulnerabilities
Scans show that tens of thousands of VMware ESXi instances are affected by CVE-2025-22224 and other vulnerabilities disclosed recently as zero-days.
Artificial Intelligence
A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies.
Artificial Intelligence
Vulnerabilities
Vulnerabilities
Remote, unauthenticated attackers could exploit the critical-severity flaw without user interaction.
Vulnerabilities
Application Security
