Jun 21, 2023Ravie LakshmananAuthentication / Vulnerability A security shortcoming in Microsoft Azure Active Directory (AD) Open Authorization (OAuth) process could have been exploited to achieve…
The US Cybersecurity and Infrastructure Security Agency (CISA) this week issued advisories detailing two unpatched vulnerabilities in Enphase products. An American energy technology company, Enphase…
The world of cybercrime is moving quickly. Threat actors, ransomware gangs, malware developers, and others are increasingly and rapidly moving off of the “traditional” dark…
Jun 21, 2023Ravie LakshmananMobile Security / Spyware More details have emerged about the spyware implant that’s delivered to iOS devices as part of a campaign…
The National Cyber Security Centre (NCSC) said its suspicious email reporting service has received 21 million reports, leading to more than 235,000 malicious websites being…
Notorious Black Basta ransomware gang has launched a cyber attack on German insurance provider BIG Direkt Gesund. According to a post by threat researcher Dominic…
Virtualization services provider VMware has raised an alarm on a VMware critical command injection vulnerability exploited in the wild was spotted. The VMware critical command…
Jun 21, 2023The Hacker NewsCybersecurity When we do quarterly planning, my team categorizes our goals within four evergreen outcomes: Reduce the risk of information security…
Banks and investment firms will increase their spend on IT to $652bn globally despite the current economic doom and gloom, with a focus on technologies…
HP published a vulnerability report about a TOCTOU flaw impacting HP PC products. The HP products using AMI UEFI Firmware – system BIOS were found…
The websites of the European Investment Bank and the European Investment Fund are back online after the cyber attack on European Investment Bank on Monday.…
The United States Department of Justice (DOJ) has created a new litigating section to increase its ability to disrupt and prosecute nation-state threat actors and…
