A critical zero-day vulnerability (CVE-2024-50623) in Cleo’s file transfer products Harmony, VLTrader, and LexiComis being actively exploited by threat actors, cybersecurity researchers have warned. The…
A bypass flaw in the FileProvider Transparency, Consent and Control (TCC) subsystem within Apple’s iOS operating system could leave users’ data dangerously exposed, according to…
The Federal Trade Commission (FTC) is distributing over $72 million in Epic Game Fortnite refunds for the company’s use of dark patterns to trick players into…
Microsoft is investigating a widespread outage that disrupted access to Microsoft 365 web applications and the Microsoft 365 admin center earlier today. The issue affected…
SUMMARY: Critical Vulnerability Alert: Dell Power Manager versions before 3.17 have a high-severity access control flaw (CVE-2024-49600) allowing attackers to gain elevated privileges. Exploitation Risk:…
The U.S. Treasury Department has sanctioned Chinese cybersecurity company Sichuan Silence and one of its employees for their involvement in a series of Ragnarok ransomware…
Dec 10, 2024Ravie LakshmananVulnerability / Threat Analysis Users of Cleo-managed file transfer software are being urged to ensure that their instances are not exposed to…
SAP fixed critical SSRF flaw in NetWeaver’s Adobe Document Services Pierluigi Paganini December 10, 2024 SAP has issued patches for 16 vulnerabilities, including a critical…
Akira Targets Cipla Pharma with Major Data Theft: 70GB of Sensitive Information Stolen Cipla, one of India’s leading pharmaceutical giants, has fallen victim to a…
As the festive season approaches, it brings not only joy and celebrations but also a surge in cyber threats. Alarmingly, 84% of businesses have suffered…
Earlier this year, the Office of Management and Budget (OMB), which establishes budget rules for federal agencies, issued a memorandum on Advancing the Responsible Acquisition of…
This article is written by Varonis Security Specialist Tom Barnea. Think about your most recent security awareness training concerning phishing attacks. It likely included guidelines…
