News
-
"North Korea Kimsuky Launch Phishing Attacks on Universities"Cybersecurity analysts have recently uncovered critical details about the North Korean advanced persistent threat (APT) group Kimsuky, which has been targeting universities as part of its global espionage operations. The researchers say that Kimsu
-
"0.0.0.0 Day: 18-Year-Old Browser Vulnerability Impacts MacOS and Linux Devices"Researchers at Oligo Security have discovered an 18-year-old vulnerability that affects all major web browsers.
-
"Stolen Credentials Have Turned SaaS Apps Into Attackers' Playgrounds"AppOmni analyzed 230 billion Software-as-a-Service (SaaS) audit log events from its telemetry to gain insight into the behavior of bad actors that gain access to SaaS apps.
-
"US Offers $10 Million for Info on Iranian Leaders Behind CyberAv3ngers Water Utility Attacks"The US State Department has identified at least six Iranian government hackers that were allegedly behind a series of attacks on US water utilities last fall.
-
"GhostWrite Vulnerability Facilitates Attacks on Devices With RISC-V CPU"Researchers from the CISPA Helmholtz Center for Information Security in Germany have detailed a RISC-V CPU vulnerability dubbed "GhostWrite." RISC-V is an open source Instruction Set Architecture (ISA) designed for developing custom processors for diff
-
"Vulnerabilities Exposed Widely Used Solar Power Systems to Hacking, Disruption"Bitdefender researchers discovered serious vulnerabilities in widely used solar power systems that could allow attackers to cause blackouts.
-
"AWS Patches Vulnerabilities Potentially Allowing Account Takeovers"According to researchers at Aqua Security, Amazon Web Services (AWS) has patched critical vulnerabilities that could have been used to take over accounts.
-
"Over 40,000 Internet-Exposed ICS Devices Found in US: Censys"Censys found more than 40,000 Internet-exposed Industrial Control Systems (ICS) in the US. Over half of these systems are likely for building control and automation, and around 18,000 are used to control industrial systems.
-
"Chrome, Firefox Updates Patch Serious Vulnerabilities"Mozilla and Google recently updated their web browsers, and the latest versions patch several potentially serious vulnerabilities. Google updated Chrome to version 127.0.6533.99, which fixes six vulnerabilities, including a critical out-of-bo
-
"Windows Update Flaws Allow Undetectable Downgrade Attacks"SafeBreach Labs researcher Alon Leviev has highlighted significant gaps in Microsoft's Windows Update architecture, warning that hackers can execute software downgrade attacks and render "fully patched" meaningless on any Windows machine.
-
"Samsung Bug Bounty Program Payouts Reach $5M, Top Reward Increased to $1M"Samsung recently announced that it has paid out nearly $5 million through its bug bounty program since its launch in 2017, including $828,000 in 2023.
-
"Ransomware Attack Cost LoanDepot $27 Million"Mortgage lender LoanDepot recently reported that the costs associated with a ransomware attack that occured in January 2024, have reached nearly $27 million.