ESET detailed a flaw that could allow a bypass of the Secure Boot in UEFI systems

1 year ago

Researchers detailed a now-patched vulnerability that could allow a bypass of the Secure Boot mechanism in UEFI systems. ESET disclosed…

Russia-linked APT Star Blizzard targets WhatsApp accounts

1 year ago

The Russian group Star Blizzard targets WhatsApp accounts in a new spear-phishing campaign, shifting tactics to avoid detection. In November…

Prominent US law firm Wolf Haldenstein disclosed a data breach

1 year ago

The law firm Wolf Haldenstein disclosed a data breach that exposed the personal information of nearly 3.5 million individuals. The…

Clop Ransomware exploits Cleo File Transfer flaw: dozens of claims, disputed breaches

1 year ago

The Clop ransomware gang claims dozens of victims from a Cleo file transfer vulnerability, though several companies dispute the breaches.…

MikroTik botnet relies on DNS misconfiguration to spread malware

1 year ago

Researchers discovered a 13,000-device MikroTik botnet exploiting DNS flaws to spoof 20,000 domains and deliver malware. Infoblox researchers discovered a…

Threat actor leaked config files and VPN passwords for over Fortinet Fortigate devices

1 year ago

A previously unknown threat actor released config files and VPN passwords for Fortinet FortiGate devices on a popular cybercrime forum.…

Microsoft Patch Tuesday updates for January 2025 fixed three actively exploited flaws

1 year ago

Microsoft Patch Tuesday security updates for January 2025 addressed 161 vulnerabilities, including three actively exploited issues. Microsoft Patch Tuesday security…

U.S. CISA adds Fortinet FortiOS flaw to its Known Exploited Vulnerabilities catalog

1 year ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiOS vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity…

Codefinger ransomware gang uses compromised AWS keys to encrypt S3 bucket

1 year ago

The ransomware group Codefinger is using compromised AWS keys to encrypt S3 bucket data using SSE-C, Halcyon researchers warn. The…

CVE-2024-44243 macOS flaw allows persistent malware installation

1 year ago

Microsoft disclosed details of a vulnerability in Apple macOS that could have allowed an attacker to bypass the OS's System…

This website uses cookies.