Collaborate Disseminate
Have I Been Pwned has analyzed the information made public by the hackers who recently targeted Allianz Life.
The post 1.1 Million Unique Records Identified in Allianz Life Data Leak appeared first on SecurityWeek.
Continue reading 1.1 Million Unique Records Identified in Allianz Life Data Leak
Researchers detailed a new 5G attack named Sni5Gect that can allow attackers to sniff traffic and cause disruption.
The post Novel 5G Attack Bypasses Need for Malicious Base Station appeared first on SecurityWeek.
Continue reading Novel 5G Attack Bypasses Need for Malicious Base Station
Workday appears to have joined the list of major companies that had their Salesforce instances targeted by hackers.
The post Workday Data Breach Bears Signs of Widespread Salesforce Hack appeared first on SecurityWeek.
Continue reading Workday Data Breach Bears Signs of Widespread Salesforce Hack
Android pKVM has achieved SESIP Level 5 certification, which means it’s resistant to highly skilled, motivated, and funded attackers.
The post Google Says Android pKVM Earns Highest Level of Security Assurance appeared first on SecurityWeek.
Continue reading Google Says Android pKVM Earns Highest Level of Security Assurance
Rockwell Automation has published several advisories describing critical and high-severity vulnerabilities affecting its products.
The post Critical Flaws Patched in Rockwell FactoryTalk, Micro800, ControlLogix Products appeared first on SecurityWeek.
Continue reading Critical Flaws Patched in Rockwell FactoryTalk, Micro800, ControlLogix Products
Cisco has released over 20 advisories as part of its August 2025 bundled publication for ASA, FMC and FTD products.
The post Cisco Patches Critical Vulnerability in Firewall Management Platform appeared first on SecurityWeek.
Continue reading Cisco Patches Critical Vulnerability in Firewall Management Platform
Path traversal and XXE injection flaws allowing unauthenticated remote code execution have been patched in Xerox FreeFlow Core.
The post Vulnerabilities in Xerox Print Orchestration Product Allow Remote Code Execution appeared first on SecurityWeek.
Continue reading Vulnerabilities in Xerox Print Orchestration Product Allow Remote Code Execution
CISA reported becoming aware of attacks exploiting CVE-2025-8875 and CVE-2025-8876 in N-able N-central on the day they were patched.
The post CISA Warns of Attacks Exploiting N-able Vulnerabilities appeared first on SecurityWeek.
Continue reading CISA Warns of Attacks Exploiting N-able Vulnerabilities
The new DDoS attack vector, which involves HTTP/2 implementation flaws, has been compared to Rapid Reset.
The post ‘MadeYouReset’ HTTP2 Vulnerability Enables Massive DDoS Attacks appeared first on SecurityWeek.
Continue reading ‘MadeYouReset’ HTTP2 Vulnerability Enables Massive DDoS Attacks
Researchers at enterprise browser security firm SquareX showed how an attacker can impersonate a user and bypass passkey security.
The post Passkey Login Bypassed via WebAuthn Process Manipulation appeared first on SecurityWeek.
Continue reading Passkey Login Bypassed via WebAuthn Process Manipulation