Hackers disseminate infostealer malware to macOS users via a sophisticated method in a new malvertising campaign. Threat actors found a way to display legitimate URLs in the paid results that…

Researchers found a new APT group that was exploiting a South Korean VPN provider, IPany The exploitation allowed cyber espionage, recording audio and data collection among others. The malicious activities…

Leaked credentials from 13 of the largest enterprise security vendors and their customers were discovered online. The leaked accounts target Okta, Jira, GitHub, AWS, Microsoft Online, Salesforce, SolarWinds, Box, WordPress,…

Several Ivanti Cloud Service Appliances critical vulnerabilities have been exploited together in a couple of attack chains. Hackers combined an administrative bypass flaw with an SQL injection one or two…

A severe 7-Zip flaw permits the bypass of the Mark-of-the-Web security feature in Windows. Archives downloaded from untrusted sources may carry a flagged Alternate Data Stream, but nested archives go…

The ransomware group RansomHub claimed new victims on its dark web portal. One post alleges the group has 500GB belonging to staffing provider Manpower. American Standard and GROHE were also…

The Director of the DHS asked to dissolve all memberships of its advisory committee. Affected bodies include CISA’s CSRB and National Security Telecommunications Advisory Committee. The move is said to…