Original reporting and analysis on vulnerabilities, threats, incidents, cybersecurity products, trends, surveys, research, case studies, technology partnerships, and breaking industry news.
Filter by topic
- Vulnerabilities
- Threats
- Incidents
- Products
- Trends
- Surveys
- Research
- Case Studies
- Partnerships
- Breaking
-
Chainalysis says breach exposed password hashes and live tokens for all users
Chainalysis widens breach disclosure to all users’ password hashes.
-
Citrix patches critical XenServer flaw reachable from management network
Citrix patches XenServer flaw that could expose virtualization hosts.
-
Critical GitLab flaw exploited in attacks as 1,000 servers remain unpatched
CISA says attackers exploit a maximum-severity GitLab flaw.
-
DigiCert confirms archived customer records and ID documents were accessed
DigiCert says unauthorized accounts read archived customer records.
-
NIKKE PC launcher tampered with to push remote-access malware
Attackers hijacked a domain to push malware through NIKKE’s launcher.
-
Google disrupts x.cpe botnet built into Android TV box firmware
Google moves against a backdoor built into Android TV boxes.
-
CISA confirms attackers are exploiting WordPress core flaw during upgrades
A WordPress core upgrade race condition is under active attack.
-
CISA flags patched Apple flaw as exploited to deliver infostealer
CISA flags a patched Apple flaw as exploited in attacks.
-
Attackers exploit maximum-severity Node-RED flaw on exposed servers
Attackers exploit a CVSS 10 Node-RED authentication flaw.
-
Zyxel switches patched in June were hit by a different zero-day, Binarly finds
Attackers exploited a separate, unknown flaw in patched Zyxel switches.