Cybersecurity researchers have found that entry points could be abused across multiple programming ecosystems like PyPI, npm, Ruby Gems, NuGet, Dart Pub, and...
Oct 14, 2024The Hacker NewsCloud Security / Vulnerability
The link between detection and response (DR) practices and cloud security has historically been weak. As...
Oct 14, 2024Ravie LakshmananNetwork Security / Vulnerability
A suspected nation-state adversary has been observed weaponizing three security flaws in Ivanti Cloud Service Appliance (CSA)...
Oct 14, 2024Ravie LakshmananRansomware / Vulnerability
Threat actors are actively attempting to exploit a now-patched security flaw in Veeam Backup & Replication to deploy...
Oct 13, 2024Ravie Lakshmanan
The Iranian threat actor known as OilRig has been observed exploiting a now-patched privilege escalation flaw impacting the Windows Kernel...
Oct 12, 2024Ravie LakshmananCryptocurrency / Cybercrime
The U.S. Department of Justice (DoJ) has announced arrests and charges against several individuals and entities in connection...
A new tax-themed malware campaign targeting insurance and finance sectors has been observed leveraging GitHub links in phishing email messages as a way...