Collaborate Disseminate
Google has patched CVE-2024-36971, a high-severity kernel zero-day vulnerability in Android that has been exploited in targeted attacks.
The post Google Patches Android Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek.
Continue reading Google Patches Android Zero-Day Exploited in Targeted Attacks
Chinese group StormBamboo spotted delivering Windows and macOS malware by compromising an ISP and using DNS poisoning.
The post Chinese Hackers Deliver Malware via ISP-Level DNS Poisoning appeared first on SecurityWeek.
Continue reading Chinese Hackers Deliver Malware via ISP-Level DNS Poisoning
A new Linux kernel exploitation technique named SLUBStick makes heap vulnerabilities more dangerous.
The post New SLUBStick Attack Makes Linux Kernel Vulnerabilities More Dangerous appeared first on SecurityWeek.
Continue reading New SLUBStick Attack Makes Linux Kernel Vulnerabilities More Dangerous
Organizations are being warned of a newly discovered Apache OFBiz vulnerability as exploitation of another recent flaw is observed.
The post Apache OFBiz Users Warned of New and Exploited Vulnerabilities appeared first on SecurityWeek.
Continue reading Apache OFBiz Users Warned of New and Exploited Vulnerabilities
Keytronic says the recent ransomware attack resulted in expenses and lost revenue totaling more than $17 million.
The post Ransomware Attack Cost Keytronic Over $17 Million appeared first on SecurityWeek.
Continue reading Ransomware Attack Cost Keytronic Over $17 Million
A high-severity security bypass vulnerability tracked as CVE-2024-6242 has been found and fixed in Rockwell Automation Logix controllers.
The post Security Bypass Vulnerability Found in Rockwell Automation Logix Controllers appeared first on SecurityW… Continue reading Security Bypass Vulnerability Found in Rockwell Automation Logix Controllers
An Avtech camera vulnerability that likely remains unfixed has been exploited in the wild, according to CISA.
The post CISA Warns of Avtech Camera Vulnerability Exploited in Wild appeared first on SecurityWeek.
Continue reading CISA Warns of Avtech Camera Vulnerability Exploited in Wild
Roundup of the more than two dozen cybersecurity-related merger and acquisition (M&A) deals announced in July 2024.
The post Cybersecurity M&A Roundup: 25 Deals Announced in July 2024 appeared first on SecurityWeek.
Continue reading Cybersecurity M&A Roundup: 25 Deals Announced in July 2024
A vulnerability dubbed PKfail can allow attackers to run malicious code during the boot process, which can be used to deliver UEFI bootkits.
The post PKfail Vulnerability Allows Secure Boot Bypass on Hundreds of Computer Models appeared first on Secur… Continue reading PKfail Vulnerability Allows Secure Boot Bypass on Hundreds of Computer Models
CrowdStrike says 97% of Windows systems impacted by its bad update are back online, just as an insurer predicts billions in losses for major companies.
The post 97% of Devices Disrupted by CrowdStrike Restored as Insurer Estimates Billions in Losses ap… Continue reading 97% of Devices Disrupted by CrowdStrike Restored as Insurer Estimates Billions in Losses