Apple’s Zero-Day Woes Continue
Two new bugs in macOS and iOS disclosed this week add to the growing list of zero-days the company has…
Spring Fixes Zero-Day Vulnerability in Framework and Spring Boot
The exploit requires a specific nonstandard configuration to work, limiting the danger it poses, but future research could turn up…
Spring patches leaked Spring4Shell zero-day RCE vulnerability
Spring released emergency updates to fix the 'Spring4Shell' zero-day remote code execution vulnerability, which leaked prematurely online before a patch…
Zero-Day Vulnerability Discovered in Java Spring Framework
A proof-of-concept exploit allows remote compromises of Spring Web applications.
Verblecon malware loader used in stealthy crypto mining attacks
Security researchers are warning of a relatively new malware loader, that they track as Verblecon, which is sufficiently complex and…
Hive ransomware ports its Linux VMware ESXi encryptor to Rust
The Hive ransomware operation has converted their VMware ESXi Linux encryptor to the Rust programming language and added new features…
Lapsus$ suspects arrested for Microsoft, Nvidia, Okta hacks
As Lapsus$ data extortion gang announced that several of its members are taking a vacation, the City of London Police…
Custom macOS malware of Chinese hackers ‘Storm Cloud’ exposed
Researchers have discovered a previously unknown macOS malware variant called GIMMICK, which is believed to be a custom tool used…
Logpoint Unleashes SaaS-Delivered Converged SIEM
Only solution to deliver integrated cloud-based SIEM, SOAR, and UEBA services directly to organizations of all sizes.
How To Defend Railway Subsystems from Targeted Cyber-Attacks
By Michael Cheng, Director at TXOne Networks & C. Max. Farrell, Senior Technical Marketing Specialist at TXOne Networks […] The…