Your Shredded Visa Card May Still Work at the Checkout

2 months ago

UMass Amherst researchers showed expired Visa contactless cards can make real purchases by exploiting an unsigned expiry field in Visa's…

Six Maximum-Severity Flaws Found in Cisco Products

2 months ago

Cisco patched nine critical flaws, including six rated CVSS 10.0, found during internal testing. None are known to be exploited.…

Fake Conferences, OAuth and WhatsApp: Inside Russia’s New Espionage Tactics

2 months ago

Google tracks three Russia-linked espionage clusters using phishing and legitimate authentication tools to target researchers, diplomats and defense staff. Google's…

GitLab Warns of Active Exploitation of Critical GraphQL Flaw

2 months ago

GitLab flaw CVE-2026-19478 is now under active exploitation, allowing unauthenticated attackers to modify or delete public projects. WatchTowr researchers warn…

Poland’s CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw

2 months ago

CERT Polska confirmed active exploitation of CVE-2026-73570, a critical unauthenticated RCE in Zimbra Collaboration Suite patched on July 20. CERT…

U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog

2 months ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity…

Cl0p Targets 40+ Organizations Through PTC Windchill Flaw

2 months ago

Cl0p claims over 40 organizations fell victim to attacks exploiting a PTC Windchill and FlexPLM vulnerability. Cl0p is using a…

Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline

2 months ago

Manic Android malware combines banking fraud and spyware, using a Bluetooth relay to steal data even when devices are offline.…

NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs

2 months ago

NSA, CISA, FBI, DOE, and EPA warn of active AI-assisted attacks against Siemens S7 PLCs across US critical infrastructure sectors.…

U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog

2 months ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an MLflow vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity…

This website uses cookies.