Hackers exploit KerioControl firewall flaw to steal admin CSRF tokens
Hackers are trying to exploit CVE-2024-52875, a critical CRLF injection vulnerability that leads to 1-click remote code execution (RCE) attacks in…
Hackers are trying to exploit CVE-2024-52875, a critical CRLF injection vulnerability that leads to 1-click remote code execution (RCE) attacks in…
Education software giant PowerSchool has confirmed it suffered a cybersecurity incident that allowed a threat actor to steal the personal…
Until September 2024, the encrypted messaging service acceded to 14 requests for user data from the US; that number jumped…
Weeks after the critical vulnerability was reported and a hacking of the Treasury Department, nearly 9,000 BeyondTrust instances remain wide…
The U.S. Treasury Department has sanctioned Beijing-based cybersecurity company Integrity Tech (also known as Yongxin Zhicheng) for its involvement in…
French tech giant Atos, which secures communications for the country's military and secret services, has denied claims made by the Space Bears…
A new variation of clickjacking attacks called "DoubleClickjacking" lets attackers trick users into authorizing sensitive actions using double-clicks while bypassing…
The fast growing region has its own unique cyber issues — and it needs its own talent to fight them.
In an era defined by continuous media announcements of organizations that have suffered both government and private data breaches and…
At least five Chrome extensions were compromised in a coordinated attack where a threat actor injected code that steals sensitive information…