The Hacker News (2 hours ago)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild.
Read the full story on The Hacker News.
Final Fantasy 14 community gets a green thumb and waters plants for players who couldn’t log in during this week’s security debacle
Disruption of foreign tech through disinformation, cyberattacks, and sabotage could be the future of this new Pentagon office.
This article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
Threat actors don’t need to rely on malware to breach organizations anymore. They’re simply calling help desks and politely asking for access, with a little help from artificial intelligence.
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers.
Following the announcement earlier this month, Google Messages for Android is rolling out an Enhanced Protection mode to counter spam and scams. more…
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX.
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month.
Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an “Autonomous Red Team Kill Chain Framework” referred to as Phantom.
Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls.
72 active sources
27 Turkish · 45 English
All sources
