Cybersecurity
Chrome Just Patched Its Sixth Zero-Day of the Year. Yes, You Should Relaunch It Now
Google has pushed out a Chrome security update fixing a dozen vulnerabilities, and one of them is already being used in real attacks. ...
Cybersecurity
A Magento Zero-Day Is Backdooring Online Stores Right Now, and There’s No Patch
Every so often a security flaw arrives with the worst possible combination of traits, and this is one of them. A zero-day vulnerability ...
Cybersecurity
SonicWall’s Remote-Access Box Is Under Attack Again. The Pattern Is the Real Alarm.
SonicWall is warning that hackers are actively exploiting two new zero-day flaws in its SMA1000 secure remote-access appliances, chaining them together to run ...
Cybersecurity
153 Million Driver’s Licenses Are for Sale. The Likely Source Is a Company Built to Stop ID Fraud.
The FBI is investigating what could be one of the largest exposures of government-issued identity documents in North American history. According to the ...
Cybersecurity
Hackers Turned an AI Coding Assistant Into a Hacking Sidekick, With Two Magic Words: “It’s a Test”
A Russian-speaking ransomware gang spent about seven weeks this spring using a mainstream AI coding assistant to help break into companies across Belgium, ...
Cybersecurity
A Bug in Software’s Central Vault Lets Attackers Walk In as Admin. They Already Have
Think of JFrog Artifactory as the vault where a company keeps its finished software: the code, containers, libraries, and build artifacts that get ...
Cybersecurity
AWS Root Accounts Targeted at More Than 150 Organizations in Password-Spraying Campaign
A password-spraying campaign targeting highly privileged AWS root accounts has been observed across more than 150 organizations, raising fresh concerns about how attackers ...
Cybersecurity
PaperCut Vulnerabilities Escalate to Active Intrusions as CISA Urges Immediate Action
A pair of recently disclosed vulnerabilities affecting PaperCut NG and PaperCut MF has moved from an emerging security concern to an active intrusion ...
Cybersecurity
The Hunters Got Hunted: An Infostealer Turned a Hacking Crew Inside Out
There is a certain poetry to how this one unravelled. A cybercrime operator linked to Blind Eagle, a group that has spent years ...
Cybersecurity
The Fake “Prove You’re Human” Box That Tricks You Into Opening Your Own Network
We have all clicked the little “verify you are human” box without a second thought. Microsoft’s threat researchers have documented a campaign, dubbed ...


















