proof of concept (PoC) exploit

Read more »

Chinese threat actor exploits old ThinkPHP flaws since October 2023

Akamai observed a Chinese-speaking group exploiting two flaws, tracked as CVE-2018-20062 and CVE-2019-9082, in ThinkPHP applications. Akamai researchers observed a Chinese threat actor exploiting two old remote code execution... Read more »

June 2024 Patch Tuesday forecast: Multiple announcements from Microsoft

May 2024 Patch Tuesday was unusual because we had security updates from Adobe, Apple, Google, Mozilla, and Microsoft on the same day. While individually from each vendor, the updates... Read more »

Cyber insurance isn’t the answer for ransom payments

Ransomware remains an ongoing threat for organizations and is the largest single cause of IT outages and downtime as 41% of data is compromised during a cyberattack, according to... Read more »

Unpacking CISA’s AI guidelines

CISA’s late April AI and infrastructure guidelines address 16 sectors along with their cybersecurity needs and operations concerning the growth of AI as a tool to build both federal... Read more »

26% of organizations lack any form of IT security training

26% of organizations don’t provide IT security training to end-users, according to Hornetsecurity. The Hornetsecurity survey, which compiled feedback from industry professionals worldwide, also reveals that 8% of organizations... Read more »

New infosec products of the week: June 7, 2024

Here’s a look at the most interesting products from the past week, featuring releases from Appdome, SailPoint, Tines, Trend Micro, Verimatrix, and Zyxel Networks. Zyxel Networks USG LITE 60AX... Read more »

A new Linux version of TargetCompany ransomware targets VMware ESXi environments

A new Linux variant of the TargetCompany ransomware family targets VMware ESXi environments using a custom shell script. A new variant of the TargetCompany ransomware group uses a custom shell... Read more »

Some Generative AI Company Employees Pen Letter Wanting ‘Right to Warn’ About Risks

Both the promise and the risk of “human-level” AI has always been part of OpenAI’s makeup. What should business leaders take away from this letter? Read more »

Darktrace MDR service improves cyber resilience for organizations

Darktrace launched its new service offering, Darktrace Managed Detection & Response (MDR). The service combines detection and response capabilities spanning across the enterprise, with the expertise of its global... Read more »
Subscribe to our Newsletter