Latest news
ISC, the maintainers of the widely-used BIND DNS server software, has released security updates to address four high-severity vulnerabilities
Engineers at Southwest Research Institute (SwRI), located in Texas, discovered a vulnerability in fast charging stations for electric vehicles
The espionage group Daggerfly has also introduced a new Windows backdoor, Trojan.Suzafk, first documented by ESET in March 2024
Suffolk County, New York, has approved an allocation of $25.7 million for recovery efforts following one of the most devastating cyberattacks
A critical vulnerability, designated CVE-2024-39700, has been discovered in the widely-used JupyterLab extension template
KnowBe4, a cybersecurity company, has unveiled an attempt to infiltrate its IT system through a fake employee from North Korea
the EMBAG law was passed and implemented. It now not only mandates the use of open-source software by the Swiss government or its contractors
CrowdStrike, a leading cybersecurity firm, has issued a warning about a new information-stealing malware dubbed "Connecio"
Google Chrome 127 brings a host of improvements, prominently featuring 24 security-related fixes, available for Windows, macOS, and Linux
the issue with CrowdStrike is not limited to the Windows operating system. As early as April this year, Linux users had been reporting kernel crash problems
CVE-2024-3246 allows attackers to inject malicious code into websites, potentially compromising sensitive data
Let's Encrypt has announced its intention to discontinue support for the Online Certificate Status Protocol (OCSP) in favor of CRLs
The vulnerabilities, identified as CVE-2012-4792 and CVE-2024-39891, pose significant risks to users and organizations
Docker has issued a security advisory for a critical vulnerability (CVE-2024-41110) affecting certain versions of Docker Engine.
CVE-2024-40075 is an XML External Entity flaw that could potentially allow attackers to execute arbitrary commands and access sensitive data
Esparza pleaded guilty in March, with charges filed in February. The FBI investigated the case as part of Operation PowerOFF
CVE-2024-6793 and CVE-2024-6794, carry the highest possible severity score of 9.8 on the Common Vulnerability Scoring System (CVSS).
Researchers found advertisements offering a specialized tool for bypassing security systems called AvNeutralizer
Experts have uncovered PyPI packages containing a malicious script in the "init.py" file that transmits user data to a Telegram bot
a 17-year-old youth from Walsall has been detained, suspected of belonging to the notorious cybercriminal group Scattered Spider
R0bl0ch0n TDS represents a sophisticated infrastructure comprising numerous domains and dedicated servers, securely protected by Cloudflare
The authorities' actions were carried out as part of Operation PowerOff, aimed at curbing the activities of DDoS-for-hire service