Cisco Warns of IOS Software Zero-Day Exploitation Attempts
Cisco this week announced patches for multiple vulnerabilities impacting its products, including a medium-severity flaw in IOS and IOS XE software that appears to have…
Category: SecurityWeek
Sysdig Launches Realtime Attack Graph for Cloud Environments
Cloud security firm Sysdig has enhanced the cloud detection and response capabilities of its CNAPP offering with a realtime cloud attack graph. This serves two…
Google Rushes to Patch New Zero-Day Exploited by Spyware Vendor
Google has rushed to patch another Chrome zero-day vulnerability exploited by a commercial spyware vendor. The internet giant announced on Tuesday that the stable channel…
Chinese Gov Hackers Caught Hiding in Cisco Router Firmware
A Chinese state-sponsored APT called BlackTech has been caught hacking into network edge devices and using firmware implants to stay hidden and silently hop around…
Google Open Sources Binary File Comparison Tool BinDiff
Google has announced that BinDiff, a popular file comparison tool maintained by the company for more than a decade, is now open source. Developed by…
CISA Unveils New HBOM Framework to Track Hardware Components
The US government’s cybersecurity agency CISA has unveiled a new Hardware Bill of Materials (HBOM) framework offering a consistent, repeatable way for vendors to communicate…
Firefox 118 Patches High-Severity Vulnerabilities
Mozilla on Tuesday announced security updates for both Firefox and Thunderbird, addressing a total of nine vulnerabilities in its products, including high-severity flaws. Firefox 118…
Gem Security Lands $23 Million Series A Funding
Gem Security, an Israeli startup with operations in New York, has attracted $23 million in venture capital investment to build and market technology in the…
Misconfigured TeslaMate Instances Put Tesla Car Owners at Risk
Misconfigured TeslaMate instances can leak tons of data on the internet, potentially exposing Tesla cars and their drivers to malicious attacks, IoT security intelligence firm…
Stolen GitHub Credentials Used to Push Fake Dependabot Commits
Threat actors have been observed pushing fake Dependabot contributions to hundreds of GitHub repositories in an effort to inject malicious code, application security firm Checkmarx…
macOS 14 Sonoma Patches 60 Vulnerabilities
Apple on Tuesday announced the release of macOS 14 Sonoma. A security advisory published by the tech giant shows that the latest version of the…
New GPU Side-Channel Attack Allows Malicious Websites to Steal Data
Nearly all modern graphics processing units (GPUs) are vulnerable to a new type of side-channel attack that could be leveraged to obtain sensitive information, according…