Dark Reading (1 hour ago)
An attacker could write arbitrary files and read sensitive files via images uploaded to the Rails Active Storage ImageMagick integration, possibly positioning a threat actor for lateral movement.
Read the full story on Dark Reading.
Vercel is gradually rolling out Device Bound Session Credentials (DBSC) on its platform as a key defense against information stealer malware.
Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials.
The web host said hackers exploited a vulnerability to access customer emails and files during a “deliberate attack.”
Hundreds of online poker players may have lost millions after malware allegedly gave a hacker access to their computer screens during games.
For the TruStream, Leak has hidden a whole lot of cutting-edge digital audio functionality in what looks like a piece of audio equipment from the swinging sixties
Google alleges that Android device manufacturer Videostrong ran the operation, which infected set-top boxes and IoT devices with a backdoor to create infrastructure for criminal activity.
Organizations may not be ready for completely autonomous communication processes, but there are places where automating information updates would alleviate pressure.
An unknown operator appears to have exfiltrated SQL Server backups from the Philippine Overseas Employment Administration in under a half hour.
The new YubiID service bridges identity verification with credential enrollment and recovery across existing identity platforms, closing a phishing-resistant authentication gap. Plus: post-quantum YubiKey beta.
69 active sources
24 Turkish · 45 English
All sources
