Access Control Gap in Microsoft Active Directory Widens Enterprise Attack Surface
One researcher thinks trust is broken in AD. Microsoft disagrees that there's a security vulnerability. But enterprise IT environments should…
One researcher thinks trust is broken in AD. Microsoft disagrees that there's a security vulnerability. But enterprise IT environments should…
Unknown attackers used zero-day exploits to abuse a new FortiOS bug patched this month in attacks targeting government and large…
CISA has added an almost three-year-old high-severity remote code execution (RCE) vulnerability in the Plex Media Server to its catalog…
A teacher who had been celebrated as the teacher of the year in San Diego County was re-arrested on additional…
Microsoft is working on introducing improved protection against phishing attacks pushing malware via malicious Microsoft OneNote files. [...]
Healthcare platform Cerebral is sending data breach notices to 3.18 million people who have interacted with its websites, applications, and…
A top Iranian, state-sponsored threat is a spear-phishing campaign that uses a fake Twitter persona to target women interested in…
The domain name registrar Freenom, whose free domain names have long been a draw for spammers and phishers, has stopped…
The Emotet malware operation is again spamming malicious emails as of Tuesday morning after a three-month break, rebuilding its network…
A new phishing campaign targets organizations in Eastern European countries with the Remcos RAT malware with aid from an old…