Month: July 2023

CISA says new malware known as Submarine was used to backdoor Barracuda ESG (Email Security Gateway) appliances on federal agencies’ networks by exploiting a now-patched zero-day bug. […]

With ransom payments declining, ransomware gangs are evolving their extortion tactics to utilize new methods to pressure victims. […]

Ivanti has fixed another vulnerability in the Endpoint Manager Mobile software (formerly MobileIron Core), exploited as a zero-day to breach the IT systems of a dozen ministries in Norway. […]

Microsoft Edge web browser has been displaying security warnings after Twitter changed its name to ‘X’. It’s got to do with a security feature dubbed ‘Progressive Web App Icon change’, designed to keep users safe during app icon or name changes. […]

CISA warned today of the significant breach risks linked to insecure direct object reference (IDOR) vulnerabilities impacting web applications in a joint advisory with the Australian Cyber Security Centre (ACSC) and U.S. National Security Agency (NSA). […]

While consumers are usually the ones worried about their information being exposed in data breaches, it’s now the hacker’s turn, as the notorious Breached cybercrime forum’s database is up for sale and member data shared with Have I Been Pwned. […]