Vulnerabilities
Researchers demonstrate remote GPU cache side-channel attack from within browsers against AMD and NVIDIA graphics cards.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Email Security
The International Monetary Fund (IMF) detects a cybersecurity incident that involved nearly a dozen email accounts getting hacked.
Threat Intelligence
Red Canary’s 2024 Threat Detection Report is based on analysis of almost 60,000 threats across 216 petabytes of telemetry from over 1,000 customers’ endpoints.
Management & Strategy
SecurityWeek’s Cyber Madness Bracket Challenge is a contest designed to bring the community together in a fun, competitive way through one of America’s top...
Endpoint Security
CPU makers Intel, AMD, Arm and IBM, as well as software vendors, are impacted by a new speculative race condition (SRC) attack named GhostRace.
ICS/OT
Vulnerabilities affecting a Nice Linear physical access product, including an exploited flaw, patched five years after their disclosure.
Artificial Intelligence
SecurityWeek talks to hundreds of industry experts from dozens of companies covering seven primary topics.
Incident Response
Microsoft says the Midnight Blizzard APT group may still be poking around its internal network after stealing source code, spying on emails.
Malware & Threats
Critical TeamCity authentication bypass vulnerability CVE-2024-27198 exploited in the wild after details were disclosed.
Mobile & Wireless
Apple rolls out urgent patches to fix multiple security flaws in its flagship iOS platform and warned about zero-day exploits in the wild.
ICS/OT
Vulnerabilities in a plugin for the Zeek network security monitoring tool can be exploited in attacks aimed at ICS environments.
ICS/OT
Researchers demonstrate that remote Stuxnet-style attacks are possible against many modern PLCs using web-based malware.
Vulnerabilities
CISA says a high-severity elevation of privilege vulnerability in Microsoft Streaming Service is actively exploited in the wild.
Malware & Threats
North Korean group Lazarus exploited AppLocker driver zero-day CVE-2024-21338 for privilege escalation in attacks involving FudModule rootkit.
Endpoint Security
Intel announces new and improved security features with the latest vPro platform and Core Ultra processors.
Government
NIST releases Cybersecurity Framework 2.0, the first major update since the creation of the CSF a decade ago.
Artificial Intelligence
AI will allow attackers to improve their attacks, and defenders to improve their defense. Over time, little will change — but the battle will...
Cybercrime
The LockBit ransomware operators announce a new leak site as they try to restore credibility after law enforcement takedown.
Malware & Threats
ConnectWise ScreenConnect vulnerability tracked as CVE-2024-1709 and SlashAndGrab exploited to deliver ransomware and other malware.
Ransomware
The US is offering big rewards for information on LockBit cybercriminals as law enforcement claims to have identified some individuals.
Artificial Intelligence
Researchers say the new ‘Cryptographic Context Injection’ technique conceals malicious instructions until they are decrypted inside a trusted execution environment.
Cloud Security
Vulnerabilities
Artificial Intelligence
Phishing
Researchers say iAuthFlow V2 can register an attacker-controlled passkey, enabling persistent access even after passwords are changed and active sessions revoked.
Vulnerabilities
Malware & Threats
Cloud Security
