Search: “Cipher Security Labs”

62 items

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 14 Vulnerability 10 Ransomware 9 Threat actor 6 Industry 5 Data breach 5 Exploit / PoC 4 Policy & legal 3 Phishing & fraud 2 Research 2 AI research 1 AI tools & infra 1

SeverityAll critical 11 high 19 medium 19 low 10 info 3

HP Easy Start for macOS: CVE-2026-12554 / CVE-2026-12555 / CVE-2026-12556

Cipher Security Labs disclosed three high-severity macOS privilege vulnerabilities in HP Easy Start, fixed in version 2.16.7.260722.

HP Easy Start for macOS contains three high-severity vulnerabilities, CVE-2026-12554, CVE-2026-12555, and CVE-2026-12556, that break the product's macOS privilege boundaries. The issues were researched by Cipher Security Labs and coordinated with HP under advisory HPSBPI04124. Fixes are available in HP Easy Start 2.16.7.260722 and later versions.

Full DisclosureSep 4, 00:13 UTC · 12d agoVulnerability CVE-2026-12554 CVE-2026-12555 CVE-2026-12556

Some Fortinet products used hardcoded keys and weak encryption

Security AffairsNov 26, 08:25 UTC · Nov 26, 2019Exploit / PoC CVE-2018-9195

The hidden smart fridge risks that emerge years after purchase

Help Net SecurityJun 19, 12:14 UTC · Jun 19, 2026Vulnerability

What EU's PQC roadmap means on the ground

Help Net SecurityJul 10, 00:00 UTC · Jul 10, 2025Threat actor

Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users

The Hacker NewsApr 25, 16:13 UTC · Apr 25, 2024Vulnerability

Friday Squid Blogging: T-Shirt

Schneier on SecurityJun 22, 16:30 UTC · Jun 22, 2020Data breach

New Pluralsight Course: What Every Developer Must Know About HTTPS

Troy HuntApr 13, 08:51 UTC · Apr 13, 2017Data breach

Sectigo unveils Sectigo Quantum Labs to help orgs prepare for quantum computers

Help Net SecurityAug 17, 00:00 UTC · Aug 17, 2020Research

Chalubo, a new IoT botnet emerges in the threat landscape

Security AffairsOct 24, 06:22 UTC · Oct 24, 2018Malware

Encryption Flaws in Popular Chinese Language App Put Users' Typed Data at Risk

The Hacker NewsAug 11, 04:51 UTC · Aug 11, 2023Exploit / PoC CVE-2023-33241 CVE-2023-33242

CVE-2016-4484 Hold down the Enter key for 70s to gain a Linux Root shell

Security AffairsNov 16, 13:42 UTC · Nov 16, 2016Vulnerability CVE-2016-4484

A few days after discovery of GandCrab ransomware ver 4.0, experts found 4.1 ver

Security AffairsJul 14, 17:35 UTC · Jul 14, 2018Ransomware

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking

The Hacker NewsJul 12, 07:34 UTC · Jul 12, 2026Vulnerability CVE-2016-6329 CVE-2016-2183

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

The Hacker NewsJun 30, 17:45 UTC · Jun 30, 2026Malware in the wildCVE-2017-17215 CVE-2025-29635 CVE-2024-1781+1 CVEs1

Review: Foundations of Cybersecurity, 2nd edition

Help Net SecurityMay 11, 00:00 UTC · May 11, 2026Threat actor

Experts Confirm JS#SMUGGLER Uses Compromised Sites to Deploy NetSupport RAT

The Hacker NewsDec 10, 07:34 UTC · Dec 10, 2025Malware

NetSecOPEN announces cybersecurity founding members and appoints board of directors

Help Net SecurityDec 15, 12:37 UTC · Dec 15, 2023AI research

Taiwan Hit by Sophisticated Phishing Campaign

Infosecurity MagazineJun 17, 14:00 UTC · Jun 17, 2025Threat actor

Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware

The Hacker NewsJul 27, 11:38 UTC · Jul 27, 2026Malware

Rorschach Ransomware Emerges: Experts Warn of Advanced Evasion Strategies

The Hacker NewsApr 6, 03:23 UTC · Apr 6, 2023Ransomware CVE-2022-413521

Microchip unveils CEC1736 Trust Shield family to offer protection against rapidly evolving security threats

Help Net SecurityMay 19, 00:00 UTC · May 19, 2022Industry

Greetings from London

Kaspersky SecurelistOct 29, 19:09 UTC · Oct 29, 2008Malware

Experts spotted a new strain of the Sage Ransomware that implements Anti

Security AffairsOct 31, 19:25 UTC · Oct 31, 2017Ransomware CVE-2015-0057

Organizations hit with Petya ransomware with a twist

Help Net SecurityJun 26, 21:23 UTC · Jun 26, 2018Ransomware

Exposed BMCs hand out password hashes before login

Help Net SecurityJul 28, 00:00 UTC · Jul 28, 2026Vulnerability CVE-2013-4786

Phishing Campaign Hides Lua Loader as TrueType Font File

Infosecurity MagazineJul 16, 15:00 UTC · Jul 16, 2026Malware

Forescout brings PQC visibility to IT, OT, IoT, and IoMT environments

Help Net SecurityJun 25, 00:00 UTC · Jun 25, 2026Policy & legal

Who viewed your Instagram account? And who stole your password?

Kaspersky SecurelistMar 21, 13:33 UTC · Mar 21, 2016Malware

Mem3nt0 mori

Kaspersky SecurelistOct 27, 03:00 UTC · Oct 27, 2025Exploit / PoC in the wildCVE-2025-2783

Friday Squid Blogging: Human Cells with Squid-Like Transparency

Schneier on SecurityJun 12, 16:03 UTC · Jun 12, 2020Phishing & fraud

Report: Threat of Emotet and Ryuk

Security AffairsJan 31, 18:58 UTC · Jan 31, 2020Ransomware

Everything you need to know about the POODLE SSL bug

Troy HuntOct 14, 23:00 UTC · Oct 14, 2014Exploit / PoC

An Android Spyware revealed the existence of a new surveillance firm

Security AffairsNov 21, 07:43 UTC · Nov 21, 2016Malware

Bad Rabbit ransomware

Kaspersky SecurelistOct 24, 18:16 UTC · Oct 24, 2017Ransomware

Using Generative AI for Surveillance

Schneier on SecurityJan 29, 02:55 UTC · Jan 29, 2025Industry

The CozyDuke APT

Kaspersky SecurelistApr 21, 20:50 UTC · Apr 21, 2015Malware

Old Wine in the New Bottle: Mirai Variant Targets Multiple IoT Devices

Unit 42 analyzed the Mirai IZ1H9 botnet variant exploiting Tenda, LB-Link, DCN and Zyxel flaws to build DDoS-capable IoT botnets.

Unit 42 observed the Mirai IZ1H9 variant on April 10, 2023, using a shell script downloader lb.sh from 163.123.143.126 to infect exposed Linux servers and networking devices. Campaigns running since November 2021 share infrastructure, near-identical bot functions and the XOR key 0xBAADF00D. The malware exploits CVE-2023-27076 (Tenda G103), CVE-2023-26801 (LB-Link), CVE-2023-26802 (DCN DCBI-Netlog-LAB) and a Zyxel RCE flaw. Compromised devices join a botnet used for DDoS attacks, and the downloader deletes logs and modifies iptables to block SSH, Telnet and HTTP recovery.

Palo Alto Unit 42Aug 17, 13:04 UTC · Aug 17, 2026Malware in the wildCVE-2023-27076 CVE-2023-26801 CVE-2023-26802