Cybersecurity

The U.S. Cybersecurity and Infrastructure Security Agency added BitBucket Server and Data Center vulnerability to its list. The critical vulnerability, which was patched in late August, affects all...

Los Angeles Unified School District announced that they denied paying the ransom stating that the money must be used to fund students and education only. Shortly after the...

Auth0 announced that Auth0 code repositories that pre-date the Okta acquisition of Auth0 are stolen by an unknown. According to the announcement, the service is fully operational and...

ZDI verified and acknowledged 2 bugs that are impacting Exchange Server 2013, 2016, and 2019, whose CVSS scores are 8.8 and 6.3 Microsoft announced that the team is...

Researchers at the Black Lotus Labs pinpoint a new multifunctional Go-based malware named Chaos. It is designed to work across several architectures, including ARM, Intel (i386), MIPS, and...

Cybersecurity researchers analyzed a lure document used to implant a variant of Graphite malware linked to the threat actor known as APT28. This PowerPoint exploits a code execution technique that is designed to...

The Main Directorate of Intelligence of the Ministry of Defense of Ukraine states that Russia is preparing for a massive cyberattack. According to the advisory published by GUR,...

Zero Trust SIM enables organizations to connect employee devices to Cloudflare's global network, integrating them with Cloudflare's Zero Trust platform. Cloudflare's new solution, Zero Trust SIM, is capable...

FARGO ransomware is targeting vulnerable Microsoft SQL instances and attacks peaked between 16-18 September. According to the researchers, along with GlobeImposter, FARGO is one of the prominent ransomware...

American Airlines confirmed that its Cyber Security Response Team confirmed a data breach incident impacting customers and employees. According to the company filing, the attackers compromised an employee's...

Sophos fixes a zero-day vulnerability, with a CVSS score of 9.8, affecting its firewall solution which is under attack. The company stated that the vulnerability is being exploited...

GitHub Security announced that hackers are targeting GitHub users with a phishing campaign by impersonating CircleCI. The phishing site looks like the GitHub login page and steals users'...

2K Games announced that a third party illegally accessed the credentials of one of its vendors to the help desk platform. The hackers sent emails to gamers that...

Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence. Trellix Advanced Research Center published its research into CVE-2007-4559, estimated to be present...

LockBit ransomware group has suffered a data breach and its new ransomware version LockBit 3.0 builder was published online. Their servers were hacked by unknown people who stole...

Trend Micro found exploit samples abusing the Atlassian Confluence vulnerability in the wild for malicious cryptocurrency mining. Attackers can exploit the vulnerability by sending a specially crafted HTTP...

There are 350,675 Internet-accessible Redis services from 260,534 unique hosts and 11% (39,405) of these services don't require authentication. China has the most unauthenticated Redis services, while the...

Imperva mitigated a single attack with over 25.3 billion requests, which is a new record for the company's solution. The attack took place on 27 June and lasted...

The U.S. FCC has added Pacific Network Corp and China Unicom Operations Limited to the national security threat list. FCC stated that these companies are subject to the...

Rockstar Games confirmed the incident that caused the leaking of screenshots from Grand Theft Auto 6, which is under development. According to the announcement, the attack doesn't affect...

Empress Emergency Medical Services announced that some of its customers' data is breached by attackers. Stolen files include patient names, dates of service, insurance information, and in some...