Search: “attribution”

258 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 3099 Ransomware 1547 Vulnerability 1294 Threat actor 1255 Exploit / PoC 842 Data breach 759 Phishing & fraud 389 Policy & legal 367 Industry 297 Research 85 AI safety & security 83 AI tools & infra 69 Advisory 67 AI research 42

SeverityAll critical 3475 high 4409 medium 1346 low 766 info 272

The great attribution debate: Why we should focus on HOW not WHO

Help Net SecurityMar 21, 12:59 UTC · Mar 21, 2018Vulnerability

30

WikiLeaks reveals the Marble framework, used by the CIA to make hard the attribution of

Security AffairsApr 1, 08:24 UTC · Apr 1, 2017Vulnerability

30

Samba 4.24.0 ships Kerberos hardening and a CVE fix for domain encryption defaults

Help Net SecurityMar 19, 00:00 UTC · Mar 19, 2026Vulnerability CVE-2026-20833

35

New Techniques to Uncover and Attribute Cobalt Gang Commodity Builders and Infrastructure Revealed

Palo Alto Unit 42Nov 5, 08:54 UTC · Nov 5, 2018Vulnerability CVE-2017-0199

35

Windows 10: What’s New in the Security System

Kaspersky SecurelistJul 21, 10:56 UTC · Jul 21, 2016Vulnerability

30

Okta Fixes Auth0 and Access Gateway Flaws Enabling XSS, Auth Bypass, and SQL Injection

Okta patched three flaws in Auth0 AD/LDAP Connector and Access Gateway, including a CVSS 9.0 stored XSS tracked as CVE-2026-85982.

Okta disclosed and patched three vulnerabilities on September 8, 2026 affecting the Auth0 AD/LDAP Connector and Okta Access Gateway. CVE-2026-85982 is a CVSS 9.0 stored XSS in the connector's admin panel caused by improper HTML encoding of directory search results and updater logs; CVE-2026-78626 is a CVSS 8.1 authorization bypass in Access Gateway Protected Rules; CVE-2026-78623 is a CVSS 7.7 SQL injection in advanced-mode datastores via unsanitized SAML assertion attributes. Fixes ship in connector version 8.0.0 and Access Gateway 2026.9.1; no exploitation has been reported.

Cyber Security Newsupdated Sep 11, 09:42 UTC · 5d agofirst Sep 11, 08:13 UTC · 5d agoVulnerability 2 sources CVE-2026-85982 CVE-2026-78626 CVE-2026-786231

45

Cisco IOS XR flaw allows attackers to crash BGP process on routers

Security AffairsMar 15, 10:41 UTC · Mar 15, 2025Vulnerability CVE-2025-20115

35

A Modern Hypervisor as a Basis for a Sandbox

Kaspersky SecurelistSep 19, 10:00 UTC · Sep 19, 2017Vulnerability

30

Unpatched Windows Server vulnerability allows full domain compromise

Help Net SecurityMay 22, 00:00 UTC · May 22, 2025Vulnerability

30

Precious Gemstones: The New Generation of Kerberos Attacks

Palo Alto Unit 42Jun 5, 17:10 UTC · Jun 5, 2024Vulnerability1

30

Following the LNK metadata trail

Cisco TalosJan 19, 13:00 UTC · Jan 19, 2023Vulnerability CVE-2015-0096

35

Obama administration 'not well-postured' to counter Russian election interference, Senate committee finds

CyberScoopFeb 6, 16:37 UTC · Feb 6, 2020Vulnerability

30

Promiscuous Cookies and Their Impending Death via the SameSite Policy

Troy HuntJan 3, 08:06 UTC · Jan 3, 2020Vulnerability

30

WordPress Plugin Facebook Widget affected by Authenticated XSS

Security AffairsJul 29, 20:43 UTC · Jul 29, 2019Vulnerability

30

DDoS technique abuses HTML5 Hyperlink Audit Ping in massive attacks

Security AffairsApr 15, 13:54 UTC · Apr 15, 2019Vulnerability

30

Patents by Silk Typhoon-linked company shed light on Beijing’s offensive hacking capabilities

The RecordJul 30, 18:15 UTC · Jul 30, 2025Vulnerability

30

China says a foreign spy agency hacked its airlines, stole passenger records

The RecordDec 19, 00:00 UTC · Dec 19, 2022Vulnerability

30

Cycldek: Bridging the (air) gap

Kaspersky SecurelistJun 3, 10:00 UTC · Jun 3, 2020Vulnerability CVE-2012-0158 CVE-2017-11882 CVE-2018-08021

35

Deception technology: Authenticity and why it matters

Help Net SecurityDec 13, 00:00 UTC · Dec 13, 2018Vulnerability

30

The Caracas operation suggests cyber was part of the plan

CyberScoopFeb 19, 11:00 UTC · Feb 19, 2026Vulnerability

30

GOFFEE’s recent attacks: new tools and techniques

Kaspersky SecurelistApr 10, 10:00 UTC · Apr 10, 2025Vulnerability1

30

VexTrio: The Uber of Cybercrime

The Hacker NewsJan 29, 03:44 UTC · Jan 29, 2024Vulnerability

30

Cybercriminals stole $1.7 billion from crypto funds in 2023 as attacks proliferated

The RecordJan 24, 21:18 UTC · Jan 24, 2024Vulnerability

30

Why do we need a risk-based approach to authentication?

Help Net SecurityJan 8, 12:34 UTC · Jan 8, 2024Vulnerability

30

Details Released for Recently Patched new macOS Archive Utility Vulnerability

The Hacker NewsOct 7, 05:13 UTC · Oct 7, 2022Vulnerability CVE-2022-32910 CVE-2022-22616

35

Patch these 2 Active Directory flaws to prevent takeover of Win domains

Security AffairsDec 21, 15:42 UTC · Dec 21, 2021Vulnerability CVE-2021-42287 CVE-2021-42278

35

Experts found three new 15-year

Security AffairsMar 13, 21:10 UTC · Mar 13, 2021Vulnerability CVE-2021-27365 CVE-2021-27363 CVE-2021-27364

35

Google addressed an XSS flaw in Gmail defining it awesome

Security AffairsNov 18, 15:46 UTC · Nov 18, 2019Vulnerability

30

Why You Shouldn’t Completely Trust Files Signed with Digital Certificates

Kaspersky SecurelistJan 29, 10:00 UTC · Jan 29, 2015Vulnerability

30

“This site may harm your computer”. How to recognize and defeat website infections

Kaspersky SecurelistSep 18, 12:42 UTC · Sep 18, 2012Vulnerability

30

North Korean hackers behind major open

The RecordJul 30, 13:04 UTC · Jul 30, 2026Vulnerability

30

New Project CAV3RN .NET Native AOT communication module

Kaspersky SecurelistJul 22, 15:43 UTC · Jul 22, 2026Vulnerability

30

Treating AI agents like service accounts for federated query security

Help Net SecurityJun 19, 11:24 UTC · Jun 19, 2026Vulnerability

30

Meet Fractal, an OS made for microarchitecture reverse engineering

Help Net SecurityMay 22, 00:00 UTC · May 22, 2026Vulnerability1

30

EternalPetya - yet another stolen piece in the package?

Malwarebytes LabsJan 13, 13:34 UTC · Jan 13, 2026Vulnerability

30

Leveraging Credentials As Unique Identifiers: A Pragmatic Approach To NHI Inventories

The Hacker NewsJun 30, 11:00 UTC · Jun 30, 2025Vulnerability

30

Hacker Forum Insights: Analyzing ‘Patch Tuesday’ to ‘Exploit Wednesday’ Patterns

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability

30

Action1 offers extended endpoint management capabilities for macOS devices

Help Net SecurityOct 7, 00:00 UTC · Oct 7, 2024Vulnerability

30

PurpleUrchin Bypasses CAPTCHA and Steals Cloud Platform Resources

Palo Alto Unit 42Jun 5, 16:59 UTC · Jun 5, 2024Vulnerability

30

Konni Group Using Russian-Language Malicious Word Docs in Latest Attacks

The Hacker NewsNov 23, 14:46 UTC · Nov 23, 2023Vulnerability CVE-2023-38831

35