SonicWall authentication flaw under threat of active exploitation
Dive Brief: Security researchers warn a critical vulnerability in SonicWall’s SonicOS is under active exploitation. The flaw, listed as CVE-2024-53704,...
Read more →Category: CyberSecurityDive
Proof-of-concept exploit released for 4 Ivanti vulnerabilities
Dive Brief: Horizon3.ai researchers on Wednesday released technical details and a proof-of-concept (PoC) exploit for four critical Ivanti vulnerabilities that...
Read more →
US authorities warn Ghost ransomware leverages older CVEs
Dive Brief: Federal authorities on Wednesday warned that Ghost ransomware has compromised organizations as recently as January by exploiting older...
Read more →
SEC revamps cyber and crypto enforcement unit under Trump administration
Dive Brief: The Securities and Exchange Commission on Thursday unveiled a revamped anti-fraud unit to protect retail investors in...
Read more →
Cisco: Salt Typhoon used new custom malware in telecom attacks
Dive Brief: In research published Thursday on Salt Typhoon’s hacking campaign against telecom carriers, Cisco Talos said the Chinese state-sponsored...
Read more →
Global tech spend to approach $5 trillion this year: Forrester
Dive Brief: Global tech spend will grow 5.6% this year to $4.9 trillion, driven by investments in cybersecurity, cloud and...
Read more →
CrowdStrike CSO Shawn Henry to retire by end of March
CrowdStrike Holdings Inc. said Chief Security Officer Shawn Henry will retire from his current role at the company as of...
Read more →
Is your browser ground zero for cyber-attacks?
The facts are stark: 65% of organizations have little-to-no control over the data being shared in GenAI apps, 98% of...
Read more →
Microsoft Power Pages vulnerability exploited in the wild
A zero-day vulnerability in Microsoft Power Pages has been exploited in the wild. The vulnerability, listed as CVE-2025-24989, is an...
Read more →
Palo Alto Networks warns hackers attempting to exploit a file read flaw in firewalls
Dive Brief: Palo Alto Networks warned that threat actors are working to exploit an authenticated file read vulnerability in its...
Read more →