News
-
"MITRE Adds Mitigations to EMB3D Threat Model"MITRE has announced the full release of the "EMB3D Threat Model," which now maps essential mitigations to security controls outlined in the Industrial Automation and Control Systems standard.
-
"Email Phishing Attacks Surge as Attackers Bypass Security Controls"According to Egress, email phishing attacks increased 28 percent in the second quarter of 2024 compared to the first quarter, with attackers using effective methods to defeat defenses.
-
"Microsoft and US Government Disrupt Russian Star Blizzard Operations"Microsoft and the US government have seized more than 100 websites used by the Russian nation-state threat actor "Star Blizzard." A US court authorized Microsoft's Digital Crimes Unit (DCU) to disrupt 66 unique domains used by Star Blizzard to at
-
"Adobe Commerce Flaw Exploited to Compromise Thousands of Sites"Sansec reports that multiple threat actors compromised over 4,000 online stores through the exploitation of a critical Adobe Commerce vulnerability named "CosmicSting." The vulnerability is an improper restriction of XML external entity reference
-
"Pig Butchering Trading Apps Found on Google Play, App Store"Security researchers at Group-IB have discovered fake trading apps on Google Play and Apple's App Store that lure victims into "pig butchering" scams.
-
"Litespeed Cache Plugin Flaw Allows XSS Attack, Update Now"Security researchers at Patchstack discovered a new vulnerability in the LiteSpeed Cache plugin for WordPress that could allow unauthenticated attackers to inject malicious code into websites.
-
"Share of Women in UK Cyber Roles Now Just 17%"According to security researchers at Socura, cybersecurity is now the fastest-growing IT role in the UK, but the share of women in such positions has fallen dramatically since 2021.
-
"CeranaKeeper Emerges as New Threat to Thai Government Networks"Security researchers at ESET have recently identified a new China-aligned threat group named CeranaKeeper, which is targeting governmental institutions in Thailand.
-
"Crypto-Doubling Scams Surge Following Presidential Debate"Security researchers at Netcraft have warned of a new wave of investment scams attempting to cash in on public awareness of the presidential debate last month.
-
CfP: 31st IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS 2025)RTAS is a top-tier conference with a focus on systems with timing requirements. RTAS’25 welcomes papers describing applications, case studies, methodologies, tools, algorithms or operating systems, middleware or hardware innovations that contribute to…
-
"Millions of Vehicles Could Be Hacked and Tracked Thanks to a Simple Website Bug"Independent security researchers found a flaw in a web portal operated by the carmaker Kia that allowed them to track millions of cars, unlock doors, and start engines.
-
"Python-Based Malware Slithers Into Systems via Legit VS Code""Mustang Panda," a Chinese Advanced Persistent Threat (APT) group, is suspected of being behind an ongoing sophisticated cyber espionage campaign.