Vulnerabilities
Print management solutions provider PaperCut warns that exploitation of a recently patched vulnerability has commenced.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Vulnerabilities
Google warns of another zero-day vulnerability in Chrome, only days after addressing a similar issue.
Malware & Threats
US and UK government agencies have issued a joint warning for Russian group APT28 targeting Cisco routers by exploiting an old vulnerability.
Malware & Threats
NSO Group used at least three iOS zero-click exploits in Pegasus attacks in 2022: FindMyPwn, PwnYourHome, and LatentImage.
Cyber Insurance
The purpose of a backstop would be to make cyberinsurance more widely available and affordable to the whole market – but it isn’t yet...
Vulnerabilities
The low code/no code movement provides simplified app generation – but it needs to be understood to be safe.
Ransomware
US payments giant NCR has confirmed being targeted in a ransomware attack for which the BlackCat/Alphv group has taken credit.
Vulnerabilities
The high-severity vulnerability, tracked as CVE-2023-2033, is described as a type confusion in the Chrome V8 JavaScript engine.
Government
CISA has described and published a set of principles for the development of security-by-design and security-by-default cybersecurity products.
Mobile & Wireless
The Android vulnerability CVE-2023-20963, reportedly exploited as a zero-day by a Chinese app against millions of devices, was added to CISA’s KEV catalog.
ICS/OT
Irrigation systems were disrupted recently in Israel in an attack that once again shows how easy it is to hack industrial control systems (ICS).
Malware & Threats
Microsoft and Citizen Lab release information on the activities, malware and victims of Israeli spyware vendor QuaDream.
Vulnerabilities
OpenAI announced a bug bounty program that will pay hackers up to $20,000 for security vulnerabilities found in ChatGPT and other products and OpenAI...
Government
The national strategy outlined by the Federal Government on March 1, 2023, is a monumental attempt to weave a consistent approach to cybersecurity for...
Nation-State
Microsoft catches an Iranian government-backed APT launching destructive Azure wiper attacks disguised as ransomware.
Vulnerabilities
The newest iOS 16.4.1 and iPadOS 16.4.1 patches a pair of code execution flaws that have already been exploited in the wild.
Malware & Threats
Microsoft, Fortra and Health-ISAC have taken legal and technical action to prevent the abuse of the Cobalt Strike exploitation tool and Microsoft software.
IoT Security
An innocent-looking portable speaker can hide a hacking device that launches CAN injection attacks, which have been used to steal cars.
Cybercrime
The FBI has seized Genesis Market, a major cybercrime website offering stolen device fingerprints.
Cybercrime
3CX supply chain attack appears to have been conducted by North Korean hackers with the goal of targeting cryptocurrency firms.
Mobile & Wireless
The bugs could be exploited to crash Safari, corrupt memory, leak sensitive data, escape the sandbox, and exfiltrate data.
Artificial Intelligence
Vulnerabilities
Supply Chain Security
Data Breaches
Vulnerabilities
Artificial Intelligence
Artificial Intelligence
