Two new security vulnerabilities have been disclosed in Rockwell Automation’s programmable logic controllers (PLCs[1]) and engineering workstation software that could be exploited by an attacker …

Threat actor groups like Wizard Spider and Sandworm have been wreaking havoc over the past few years – developing and deploying cybercrime tools like Conti, …

A Chinese advanced persistent threat tracked as Deep Panda has been observed exploiting the Log4Shell vulnerability[1] in VMware Horizon servers to deploy a backdoor and …

The North Korean state-backed hacking crew, otherwise known as the Lazarus Group[1], has been attributed to yet another financially motivated campaign that leverages a trojanized …

Networking equipment maker Zyxel has pushed security updates for a critical vulnerability affecting some of its business firewall and VPN products that could enable an …

Apple on Thursday rolled out emergency patches to address two zero-day flaws in its mobile[1] and desktop operating systems[2] that it said may have been …

The maintainers of Spring Framework have released an emergency patch to address a newly disclosed remote code execution flaw[1] that, if successfully exploited, could allow …

A Belarusian threat actor known as Ghostwriter (aka UNC1151) has been spotted leveraging the recently disclosed browser-in-the-browser (BitB) technique as part of their credential phishing …

Three security vulnerabilities have been disclosed in the popular Wyze Cam devices that grant malicious actors to execute arbitrary code and access camera feeds as …

Researchers have disclosed what they say is the first-ever Python-based ransomware strain specifically designed to target exposed Jupyter notebooks, a web-based interactive computing platform that …