The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2018-8639, a decade-old Microsoft Windows privilege escalation flaw, to its Known Exploited Vulnerabilities (KEV) catalog amid…
Mar 04, 2025Ravie LakshmananNetwork Security / Ransomware Internet service providers (ISPs) in China and the West Coast of the United States have become the target…
Solid-state drive (SSD) prices per gigabyte (GB) dropped over the last two quarters – since the beginning of September 2024 – while SAS hard disk…
Mar 04, 2025Ravie LakshmananCyber Espionage / Malware Threat hunters are calling attention to a new highly-targeted phishing campaign that singled out “fewer than five” entities…
Google’s March 2025 Android Security Bulletin has unveiled two critical vulnerabilities—CVE-2024-43093 and CVE-2024-50302—currently under limited, targeted exploitation. These flaws, impacting Android versions 12 through 15,…
The Cybersecurity and Infrastructure Security Agency (CISA) recently updated its Known Exploited Vulnerabilities (KEV) Catalog by adding five vulnerabilities that have been actively exploited in…
A critical vulnerability in BigAntSoft’s enterprise chat server software has exposed ~50 internet-facing systems to unauthenticated remote code execution attacks. Designated CVE-2025-0364, this exploit chain enables…
DDoS Attack Fueled by Over 30,000 Hacked CCTV Cameras and NVRs A recent discovery by security experts from Nokia Deepfield and GreyNoise has revealed a…
CISA maintains stance on Russian cyber threats despite policy shift Pierluigi Paganini March 04, 2025 US CISA confirms no change in defense against Russian cyber…
Cyberattacks have become an unfortunate reality for businesses and individuals alike. The devastation caused by a cyberattack can be overwhelming, especially when it results in…
In this Help Net Security interview, Matthew Darlage, CISO at Citizens, discusses key strategies for strengthening cyber resilience in banks. He underlines that adherence to…
Two critical security flaws in IBM Storage Virtualize products could enable attackers to bypass authentication protections and execute malicious code on enterprise storage systems, according…
