Collaborate Disseminate
Already added to CISA’s KEV catalog, the flaw allows attackers to bypass authentication and gain administrative privileges.
The post Cisco Patches Catalyst SD-WAN Zero-Day Exploited by Highly Sophisticated Hackers appeared first on SecurityWeek.
Continue reading Cisco Patches Catalyst SD-WAN Zero-Day Exploited by Highly Sophisticated Hackers
The four security defects could be exploited for remote code execution but require administrative privileges.
The post SolarWinds Patches Four Critical Serv-U Vulnerabilities appeared first on SecurityWeek.
Continue reading SolarWinds Patches Four Critical Serv-U Vulnerabilities
Peter Williams was sentenced to 87 months in prison for selling cyber exploits to a Russian broker.
The post Ex-US Defense Contractor Executive Jailed for Selling Exploits to Russia appeared first on SecurityWeek.
Continue reading Ex-US Defense Contractor Executive Jailed for Selling Exploits to Russia
Hackers claim to have stolen personally identifiable information and internal corporate data from the automotive firm.
The post Over 12 Million Users Impacted by CarGurus Data Breach appeared first on SecurityWeek.
Continue reading Over 12 Million Users Impacted by CarGurus Data Breach
The company will expand its AI-based analysis capabilities, grow its employee base, and scale deployments.
The post Astelia Raises $35 Million for Exposure Management appeared first on SecurityWeek.
Continue reading Astelia Raises $35 Million for Exposure Management
The company says the attackers accessed internal business systems such as Zendesk and Salesforce.
The post Ad Tech Company Optimizely Targeted in Cyberattack appeared first on SecurityWeek.
Continue reading Ad Tech Company Optimizely Targeted in Cyberattack
Written in C++ and Python, the malware exfiltrates system information, browser data, and steals files.
The post ‘Arkanix Stealer’ Malware Disappears Shortly After Debut appeared first on SecurityWeek.
Continue reading ‘Arkanix Stealer’ Malware Disappears Shortly After Debut
The malicious code propagates like a worm, poisons AI assistants, exfiltrates secrets, and contains a destructive dead switch.
The post New ‘Sandworm_Mode’ Supply Chain Attack Hits NPM appeared first on SecurityWeek.
Continue reading New ‘Sandworm_Mode’ Supply Chain Attack Hits NPM
Attackers can inject malicious instructions in a GitHub Issue that are automatically processed by Copilot when launching a Codespace from that issue.
The post GitHub Issues Abused in Copilot Attack Leading to Repository Takeover appeared first on Secur… Continue reading GitHub Issues Abused in Copilot Attack Leading to Repository Takeover
The group’s administrator and moderator were arrested last year, and two other members were arrested this month.
The post Anonymous Fénix Members Arrested in Spain appeared first on SecurityWeek.
Continue reading Anonymous Fénix Members Arrested in Spain