Subaru patched a flaw in its Starlink system that permitted an unauthorized party to access precise car location tracking data and logs. The vulnerability could have permitted remote takeover of…

MasterCard uses five DNS servers provided by Akamai, one of which contained a domain typo. The domain was unregistered and could have been acquired to divert traffic from the company…

Hackers leverage common CAPTCHA codes to trick victims into running malicious commands on their machines. An HTML Application file is downloaded, triggering a multi-stage PowerShell script. The campaign’s focus appears…

Researchers found data related to vulnerability in software and hardware in Palo Alto Networks devices. Several flaws could expose the system to an attacker to launch malware and access data.…

Hackers disseminate infostealer malware to macOS users via a sophisticated method in a new malvertising campaign. Threat actors found a way to display legitimate URLs in the paid results that…

Researchers found a new APT group that was exploiting a South Korean VPN provider, IPany The exploitation allowed cyber espionage, recording audio and data collection among others. The malicious activities…

Leaked credentials from 13 of the largest enterprise security vendors and their customers were discovered online. The leaked accounts target Okta, Jira, GitHub, AWS, Microsoft Online, Salesforce, SolarWinds, Box, WordPress,…