An ElasticSearch server instance that was left open on the Internet without a password contained sensitive financial information about loans from Indian and African financial …

Cisco Systems on Wednesday shipped security patches to contain three flaws impacting its Enterprise NFV Infrastructure Software (NFVIS[1]) that could permit an attacker to fully …

Cloud security and application delivery network (ADN[1]) provider F5 on Wednesday released patches to contain 43 bugs spanning its products. Of the 43 issues addressed[2], …

The U.S. Securities and Exchange Commission (SEC) on Tuesday announced that it will expand and rebrand its Cyber Unit to fight against cyber-related threats and …

An elusive and sophisticated cyberespionage campaign orchestrated by the China-backed Winnti group has managed to fly under the radar since at least 2019. Dubbed “Operation …

A pre-authenticated remote code execution vulnerability has been disclosed in dotCMS, an open-source content management system written in Java and “used by over 10,000 clients …

A growing number of threat actors[1] are using the ongoing Russo-Ukrainian war as a lure in various phishing and malware campaigns, even as critical infrastructure …

Cybersecurity researchers have detailed as many as five severe security flaws in the implementation of TLS protocol in several models of Aruba and Avaya network …

An analysis of four months of chat logs spanning more than 40 conversations between the operators of Conti and Hive ransomware and their victims has …

Cybersecurity researchers have disclosed a new variant of the AvosLocker ransomware that disables antivirus solutions to evade detection after breaching target networks by taking advantage …