Collaborate Disseminate
Oleksii Oleksiyovych Lytvynenko admitted to working on the development of a loader for the Conti gang.
The post Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges appeared first on SecurityWeek.
Continue reading Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges
The extortion group threatens to leak 297 GB of data allegedly stolen from the Council of Europe, including employee personal information.
The post ShinyHunters Claims Council of Europe Hack appeared first on SecurityWeek.
Continue reading ShinyHunters Claims Council of Europe Hack
The platform used more than 9,000 phishing sites, stealing nearly 4 million credit cards and causing roughly $1.9 billion in losses.
The post FBI, Google Dismantle ‘Outsider Enterprise’ Phishing Service appeared first on SecurityWeek.
Continue reading FBI, Google Dismantle ‘Outsider Enterprise’ Phishing Service
By default, npm install will no longer execute scripts from dependencies, unless explicitly allowed.
The post NPM 12 Will Change Script Execution Behavior to Prevent Supply Chain Attacks appeared first on SecurityWeek.
Continue reading NPM 12 Will Change Script Execution Behavior to Prevent Supply Chain Attacks
The hackers published 5GB of data, including customer personal information and credentials for the RTKBase platform.
The post Iranian Cyber Group Handala Claims Cal Water Hack appeared first on SecurityWeek.
Continue reading Iranian Cyber Group Handala Claims Cal Water Hack
The critical-severity OS command injection vulnerability allows attackers to execute arbitrary code with root privileges.
The post Ivanti Sentry Exploitation Attempts Hitting Honeypots appeared first on SecurityWeek.
Continue reading Ivanti Sentry Exploitation Attempts Hitting Honeypots
The browser refresh resolved critical and high-severity security defects, including a dozen use-after-free bugs.
The post Chrome 149 Update Patches 28 Vulnerabilities appeared first on SecurityWeek.
Continue reading Chrome 149 Update Patches 28 Vulnerabilities
The new BOD 26-04 requires agencies to review and update vulnerability management policies with a focus on KEV catalog entries.
The post CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk appeared first on SecurityWeek.
Continue reading CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk
Disclosed in March, the security defect enables unauthenticated attackers to write files to arbitrary locations on the system.
The post Hackers Exploit Langflow Vulnerability for Remote Code Execution appeared first on SecurityWeek.
Continue reading Hackers Exploit Langflow Vulnerability for Remote Code Execution
The security defects could allow attackers to create or modify arbitrary files and access and modify protected resources.
The post Splunk, Palo Alto Networks Patch Severe Vulnerabilities appeared first on SecurityWeek.
Continue reading Splunk, Palo Alto Networks Patch Severe Vulnerabilities