Collaborate Disseminate
More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.
The post Impact, Root Cause of GitHub Actions Supply Chain Hack Revealed appeared first on SecurityWeek.
Continue reading Impact, Root Cause of GitHub Actions Supply Chain Hack Revealed
SANS is seeing attempts to exploit two critical Cisco Smart Licensing Utility vulnerabilities tracked as CVE-2024-20439 and CVE-2024-20440.
The post Hackers Target Cisco Smart Licensing Utility Vulnerabilities appeared first on SecurityWeek.
Continue reading Hackers Target Cisco Smart Licensing Utility Vulnerabilities
Attacks involving Paragon’s Graphite spyware involved a WhatsApp zero-day that could be exploited without any user interaction.
The post Paragon Spyware Attacks Exploited WhatsApp Zero-Day appeared first on SecurityWeek.
Continue reading Paragon Spyware Attacks Exploited WhatsApp Zero-Day
Microsoft has shared details on StilachiRAT, an evasive and persistent piece of malware that facilitates sensitive data theft.
The post Microsoft Warns of New StilachiRAT Malware appeared first on SecurityWeek.
Continue reading Microsoft Warns of New StilachiRAT Malware
A critical vulnerability affecting baseboard management controller (BMC) firmware made by AMI could expose many devices to remote attacks.
The post Critical AMI BMC Vulnerability Exposes Servers to Disruption, Takeover appeared first on SecurityWeek.
Continue reading Critical AMI BMC Vulnerability Exposes Servers to Disruption, Takeover
ZDI has uncovered 1,000 malicious .lnk files used by state-sponsored and cybercrime threat actors to execute malicious commands.
The post 11 State-Sponsored APTs Exploiting LNK Files for Espionage, Data Theft appeared first on SecurityWeek.
Continue reading 11 State-Sponsored APTs Exploiting LNK Files for Espionage, Data Theft
Google has confirmed reports that it’s buying cloud security giant Wiz and says it’s prepared to pay $32 billion in cash.
The post Google to Acquire Cloud Security Giant Wiz for $32 Billion in Cash appeared first on SecurityWeek.
Continue reading Google to Acquire Cloud Security Giant Wiz for $32 Billion in Cash
Exploit and vulnerability intelligence provider VulnCheck has raised $12 million in a Series A funding round.
The post VulnCheck Raises $12 Million for Vulnerability Intelligence Platform appeared first on SecurityWeek.
Continue reading VulnCheck Raises $12 Million for Vulnerability Intelligence Platform
Cloudflare launches Cloudforce Threat Events Feed, a service designed to provide security teams with real-time threat intelligence.
The post New Cloudflare Service Provides Real-Time Threat Intelligence appeared first on SecurityWeek.
Continue reading New Cloudflare Service Provides Real-Time Threat Intelligence
Vulnerabilities in Nvidia Riva could allow hackers to abuse speech and translation AI services that are typically expensive.
The post Nvidia Riva Vulnerabilities Allow Unauthorized Use of AI Services appeared first on SecurityWeek.
Continue reading Nvidia Riva Vulnerabilities Allow Unauthorized Use of AI Services