Government
The US has cracked down on an influence operation sponsored by the Russian government, announcing charges, sanctions and domain seizures.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Security Architecture
Microsoft is experimenting with a major new security mitigation to block attacks targeting flaws in the Windows Common Log File System (CLFS).
Mobile & Wireless
Google has released Android security updates to patch an exploited local privilege escalation vulnerability.
Endpoint Security
Intel has shared some clarifications on claims made by a researcher regarding the hacking of its SGX security technology.
Ransomware
The RansomHub ransomware group, which has made at least 210 victims, is believed to be behind the attack on oil giant Halliburton.
Malware & Threats
The Iran-linked state-sponsored hacker group tracked as Peach Sandstorm has started using a new backdoor in attacks aimed at the US and UAE.
Cyberwarfare
Amidst Volt Typhoon zero-day exploitation, Censys finds hundreds of exposed servers presenting ripe attack surface for attackers.
Nation-State
A WPS Office zero-day vulnerability tracked as CVE-2024-7262 was exploited by South Korean hacker group APT-C-60.
Cybercrime
The Port of Seattle, including the SEA Airport, is experiencing system outages likely caused by a cyberattack.
Cyberwarfare
Malware hunters catch Chinese APT Volt Typhoon exploiting a zero-day in Versa Director servers used by ISPs and MSPs.
Compliance
The Dutch Data Protection Authority has fined Uber €290 million ($320 million) for driver data transfer practices that allegedly violate GDPR.
Nation-State
Meta said it discovered a network of Iranian hackers, who posed as tech support agents for companies including AOL, Microsoft, Yahoo and Google.
Vulnerabilities
SolarWinds has issued a second Web Help Desk hotfix to remove hardcoded credentials after patching a critical-severity vulnerability last week.
Data Breaches
US oil giant Halliburton confirmed its computer systems were hit by a cyberattack that affected operations at its Houston offices.
Security Architecture
An inside look at how LinkedIn developed an internal AI-assisted vulnerability management system to protect its massive infrastructure and user base.
Cybercrime
Microchip Technology has disclosed a cyberattack impacting operations at some of its manufacturing facilities.
IoT Security
A significant backdoor in contactless cards made by China-based Shanghai Fudan Microelectronics allows instantaneous cloning of RFID cards used to open office doors and...
Nation-State
The vulnerability, tracked as CVE-2024-38193 and marked as ‘actively exploited’ by Microsoft, allows SYSTEM privileges on the latest Windows operating systems.
Data Breaches
National Public Data (NPD) has confirmed suffering a data breach, but the company says the incident only affects 1.3 million people in the US.
Vulnerabilities
The US cybersecurity agency CISA warns that a recent SolarWinds Web Help Desk vulnerability has been exploited in the wild.
Artificial Intelligence
A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies.
Artificial Intelligence
Vulnerabilities
Vulnerabilities
The flaws could lead to remote code execution, authentication bypasses, and path traversal attacks.
Artificial Intelligence
Artificial Intelligence
Vulnerabilities
Application Security
