A security alert issued by the Federal Bureau of Investigation (FBI) signals the detection of a wave of the attack known as business email compromise (BEC) in which threat actorsRead More →
Two security researchers reported the detection of a critical vulnerability in the popular Grafana dashboard. Tracked as CVE-2022-21703, the flaw was described as a server-side request forgery (CSRF) that wouldRead More →
A full white paper was released this week on a recently fixed a critical remote code execution (RCE) vulnerability in Apache Cassandra, a distributed NoSQL database that offers high scalabilityRead More →
The U.S. Department of Justice (DOJ) has reported that Mexican businessman Carlos Guerrero pleaded guilty to conspiracy to sell and use hacking tools while serving as director of a commercialRead More →
Google has issued an update for Chrome users on Windows, Linux and macOS operating systems in order to address a zero-day vulnerability that could have been actively exploited by maliciousRead More →
The sophistication of cyber threats is rapidly increasing, causing disastrous consequences for enterprises worldwide. According to a Microsoft Digital Defense Report, cybercriminal groups are evolving their techniques, adjusting the typesRead More →
Software as a Service (SaaS) is a software distribution model that allows cloud providers to host applications and make them available to end users over the Internet. In some cases,Read More →
Earlier this week, VMware announced the correction of multiple critical vulnerabilities in products such as VMware ESXi, Workstation and Fusion, most of them reported during last year’s Tianfu Cup ethicalRead More →
Researchers at security firm Sophos recently reported a hacking campaign related to the ProxyLogon and ProxyShell exploits for the exploitation of an unpatched Microsoft Exchange server. This compromised server wasRead More →
A report by security firm Proofpoint details the finding of a hacking campaign employing phishing and social engineering tactics aimed at distributing a dangerous variant of remote access Trojan (RAT)Read More →
Cybersecurity specialists report the detection of multiple vulnerabilities in VMware Cloud Foundation (ESXi), a popular hybrid cloud platform. According to the report, successful exploitation of the flaws would allow threatRead More →
A few hours before the Super Bowl, the San Francisco 49ers security teams confirmed the detection of a ransomware attack on their corporate networks. The attack was confirmed by theRead More →
Recent reports indicate that Russian authorities have sentenced three teenagers to five years in prison for an unprecedented reason: the young men allegedly “conspired” to blow up a virtual versionRead More →
In the digital age, corporations have all sorts of tools to protect their information. Even so, hackers and other nefarious cyber-crooks are always trying to stay one step ahead ofRead More →
In its most recent statement, the Cybersecurity and Infrastructure Security Agency (CISA) added 15 new vulnerabilities to its Catalog of Known Exploited Vulnerabilities, a list of known security flaws thatRead More →
The U.S. Department of Justice (DOJ) announced that Gary W. Browser, alleged leader of the hacking group Team Xecutor, has been sentenced to 40 months in prison, in addition toRead More →
Moxa users will need to upgrade MXview to versions greater than 3.2.4 in order to address five vulnerabilities in the web-based network management system. These failures received critical scores ofRead More →
In its latest security alert, Adobe asked users of the Magento 1 e-commerce platform to update to the latest available version of Adobe Commerce; this after the company was notifiedRead More →
Ransomware is still one of the most lucrative hacking variants for cybercriminal groups. In its latest report, the firm Chainalysis reports that encryption malware operating groups made profits of upRead More →
In its latest security alert, Siemens announced the release of patches to address multiple critical vulnerabilities whose exploitation would allow some models of programmable logic controllers (PLC) to be remotelyRead More →
