GitHub Desktop Vulnerability Risks Credential Leaks via Malicious Remote URLsThe Hacker News·Jan 28, 03:11 UTC · Jan 28, 2025VulnerabilityCVE-2025-23040CVE-2024-50338CVE-2024-53263+4 CVEs35
WordPress Skimmers Evade Detection by Injecting Themselves into Database TablesThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2025Data breach145
Ruijie Networks' Cloud Platform Flaws Could've Exposed 50,000 Devices to Remote AttacksThe Hacker News·Dec 27, 17:23 UTC · Dec 27, 2024VulnerabilityCVE-2024-47547CVE-2024-48874CVE-2024-52324+6 CVEs60
Chinese national charged for hacking thousands of Sophos firewallsSecurity Affairs·Dec 11, 10:20 UTC · Dec 11, 2024Policy & legal in the wildCVE-2020-1227160
Researchers Uncover Prompt Injection Vulnerabilities in DeepSeek and Claude AIThe Hacker News·Dec 9, 11:55 UTC · Dec 9, 2024AI safety & security30
Public and private sectors must partner to address generative AI’s interdependent energy and security requirementsCyberScoop·Dec 9, 11:00 UTC · Dec 9, 2024Data breach60
Warning: VMware vCenter and Kemp LoadMaster Flaws Under Active ExploitationThe Hacker News·Nov 21, 03:53 UTC · Nov 21, 2024Ransomware in the wildCVE-2024-1212CVE-2024-38812CVE-2024-38813+1 CVEs60
NIST Recommends Some Common-Sense Password RulesSchneier on Security·Oct 14, 19:22 UTC · Oct 14, 2024Industry30
Veeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical IssuesThe Hacker News·Sep 10, 03:33 UTC · Sep 10, 2024VulnerabilityCVE-2024-40711CVE-2024-42024CVE-2024-42019+2 CVEs160
Apache fixed a new remote code execution flaw in Apache OFBizSecurity Affairs·Sep 6, 08:13 UTC · Sep 6, 2024VulnerabilityCVE-2024-45195CVE-2024-32113CVE-2024-36104+1 CVEs60
How multiple vulnerabilities in Microsoft apps for macOS pave the way to stealing permissionsCisco Talos·Aug 19, 10:00 UTC · Aug 19, 2024VulnerabilityCVE-2024-42220CVE-2024-42004CVE-2024-39804+5 CVEs35
City governments in Michigan, New York face shutdowns after ransomware attacksThe Record·Jun 13, 18:38 UTC · Jun 13, 2024Ransomware57
Container Escape to Shadow Admin: GKE Autopilot VulnerabilitiesPalo Alto Unit 42·Jun 5, 23:26 UTC · Jun 5, 2024VulnerabilityCVE-2020-855447
LG TV Vulnerabilities Expose 91,000 DevicesInfosecurity Magazine·Apr 10, 16:30 UTC · Apr 10, 2024VulnerabilityCVE-2023-6317CVE-2023-6318CVE-2023-6319+1 CVEs35
Network outages in Birmingham persist as city officials stay tightThe Record·Mar 15, 17:22 UTC · Mar 15, 2024Ransomware57
Critical Cisco Flaw Lets Hackers Remotely Take Over Unified Comms SystemsThe Hacker News·Jan 26, 05:13 UTC · Jan 26, 2024VulnerabilityCVE-2024-20253CVE-2024-2027260
1Kosmos BlockID 1Key secures users in restricted environmentsHelp Net Security·Jan 25, 00:00 UTC · Jan 25, 2024Phishing & fraud30
Venafi Stop Unauthorized Code Solution reduces attack surfaceHelp Net Security·Jan 24, 00:00 UTC · Jan 24, 2024Malware42
New Bluetooth Flaw Let Hackers Take Over Android, Linux, macOS, and iOS DevicesThe Hacker News·Jan 12, 12:51 UTC · Jan 12, 2024VulnerabilityCVE-2023-45866CVE-2024-0230CVE-2024-2130660
Most Sophisticated iPhone Hack Ever Exploited Apple's Hidden Hardware FeatureThe Hacker News·Jan 4, 05:41 UTC · Jan 4, 2024Exploit / PoC in the wildCVE-2023-41990CVE-2023-32434CVE-2023-32435+4 CVEs160
LG Electronics joins IBM Quantum Network to explore applications of quantum computingHelp Net Security·Dec 12, 12:59 UTC · Dec 12, 2023Industry30
Lobbyists Push Self-Driving Trucks Law Through California, No Safety Operators Required404 Media·Sep 27, 14:52 UTC · Sep 27, 2023Policy & legal55
Alert: Apache Superset Vulnerabilities Expose Servers to Remote Code Execution AttacksThe Hacker News·Sep 8, 02:46 UTC · Sep 8, 2023VulnerabilityCVE-2023-39265CVE-2023-37941CVE-2023-36388+2 CVEs47
Zoom amends terms of service after pushback on using calls to train AI modelsThe Record·Aug 8, 12:48 UTC · Aug 8, 2023Threat actor45
Urgent Security Updates: Cisco and VMware Address Critical VulnerabilitiesThe Hacker News·Jun 8, 05:18 UTC · Jun 8, 2023VulnerabilityCVE-2023-20887CVE-2023-20888CVE-2023-20889+5 CVEs60
Permit.io launches FoAz to give frontend developers the keys to securityHelp Net Security·May 31, 00:00 UTC · May 31, 2023AI tools & infra30
Dallas courts, fire and police networks still crippled from ransomware incidentThe Record·May 8, 14:26 UTC · May 8, 2023Ransomware57
Regula updates Face SDK to protect users against different attack vectorsHelp Net Security·Apr 13, 00:00 UTC · Apr 13, 2023Phishing & fraud30
Industrial cybersecurity: Protecting OT from ITHelp Net Security·Mar 9, 19:40 UTC · Mar 9, 2023Vulnerability55
ISC fixed high-severity flaws in DNS software suite BINDSecurity Affairs·Jan 28, 11:22 UTC · Jan 28, 2023VulnerabilityCVE-2022-3094CVE-2022-3736CVE-2022-392447
Inside TikTok’s proposal to address US national security concernsCyberScoop·Jan 27, 17:45 UTC · Jan 27, 2023Malware142
Friday Squid Blogging: Colossal Squid in New Zealand MuseumSchneier on Security·Sep 9, 21:03 UTC · Sep 9, 2022Industry30
Microsoft Discover Severe ‘OneThe Hacker News·Sep 1, 07:13 UTC · Sep 1, 2022Exploit / PoCCVE-2022-2879960
Cisco Releases Patches for Critical Flaws Impacting Nexus Dashboard for Data CentersThe Hacker News·Jul 21, 11:32 UTC · Jul 21, 2022VulnerabilityCVE-2022-20857CVE-2022-20858CVE-2022-20861+2 CVEs60
API security warrants its own specific solutionHelp Net Security·Jun 13, 00:00 UTC · Jun 13, 2022Vulnerability55
3 key elements to protect a Kubernetes clusterHelp Net Security·May 23, 00:00 UTC · May 23, 2022AI safety & security30
Cisco Issues Patches for 3 New Flaws Affecting Enterprise NFVIS SoftwareThe Hacker News·May 5, 03:13 UTC · May 5, 2022VulnerabilityCVE-2022-20777CVE-2022-20779CVE-2022-20780+1 CVEs47
Swiss army asks its personnel to use the Threema instantSecurity Affairs·Jan 9, 15:34 UTC · Jan 9, 2022Research55
Broward Health suffered a data breach that impacted +1.3 million peopleSecurity Affairs·Jan 4, 05:36 UTC · Jan 4, 2022Data breach57