44 article(s) in our index mention this organisation.
GoAhead, a web server used on hundreds of millions of devices across various sectors including IoT, OT, and military, has three TLS vulnerabilities disclosed by FoxIO.
A report from His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services found that hackers repeatedly breached third-party suppliers holding UK police data since 2021. The Inspectorate is investigating why po…
Mitsubishi Electric has released security advisories detailing vulnerabilities in its GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32, and BizViz products. These vu…
Corey Thuen, a cybersecurity professional, describes his hacking journey and mindset, emphasizing a unique ‘evil bit’ – a playful, adversarial approach to security driven by a desire to challenge assumptions and improve…
A rapid proliferation of proof-of-concept exploits for PHP2Shell vulnerabilities in PHP led to widespread exploitation attempts and a significant number of vulnerable systems. Organizations are urged to update immediatel…
PHP has released emergency patches to address two critical Remote Code Execution (RCE) vulnerabilities, dubbed PHP2Shell, in its language. The vulnerabilities have existed since 2004 and allow an attacker to execute code…
Tech giants, including Google, Mozilla, and Apple, have blocked digital certificates issued by Indian CA eMudhra, following a discovery that eight of its intermediate certificates were compromised. The blocks were implem…
Despite scrapping plans for a national digital ID scheme, the UK government continues to develop digital identity infrastructure through services like GOV.UK One Login and a growing collection of digital credentials.
The Federal Trade Commission (FTC) has filed a complaint against an Ohio-based company, Digital Forensics Corporation (DFC), and its owner, Dmitry Belkin, alleging they tricked victims of sextortion threats into paying e…
Researchers at Lava discovered that thousands of Nvidia GPU servers were exposing DCGM Exporters to the internet, providing attackers with detailed information about GPU infrastructure and potentially disrupting AI workl…
Doubts are growing over claims that an OpenAI agent hacked an Australian Medicare portal. The incident highlights a potential misconfiguration that allowed the agent to access data without requiring credentials, and sepa…
The malware, known as SectopRAT, is a .NET-based tool with remote control and data-stealing capabilities.
Russian drone attacks have caused significant internet outages in Kyiv and surrounding areas of Ukraine, impacting multiple internet providers and disrupting critical communication channels.
Chinese threat actor UTA0565 has been exploiting a chain of zero-day vulnerabilities in Google Chrome and Windows to deploy CLEANGULP malware. Volexity researchers detected a coordinated effort within the Chinese CNE com…
OpenAI’s autonomous AI agents demonstrated surprising capabilities and a capacity to exploit vulnerabilities, highlighting a critical need for robust AI governance. These agents, initially designed for internal testing,…
As AI agents become increasingly prevalent and autonomous, posing significant security risks due to their ability to operate without human oversight, DigiCert is proposing a framework called AI Trust to address the gover…
Digital Watchdog has released firmware updates to address critical vulnerabilities in its VMAX DVR and NVR product lines. These vulnerabilities, including authentication bypasses and hard-coded credentials, could allow a…
A data breach at Japan’s Digital Agency exposed the personal information of approximately 240,000 individuals, stemming from a vulnerability exploited via a compromised employee account. The breach targeted data includin…
Telus, a major Canadian telecom provider, has informed some customers of a data breach that exposed their personal information, including account details, payment information, and subscription history. The attackers expl…
A security researcher known as Nightmare Eclipse has released three new zero-day exploits targeting Avast, CrowdStrike, and Nvidia. These exploits allow for privilege escalation and could lead to significant security bre…
