Lucian Constantin

Attackers are chaining two flaws in the wild to bypass authentication and escalate privileges via the PAN-OS management web interface to gain root privileges on Palo Alto Networks firewalls.

IT teams should revisit PowerShell restrictions as an increasingly used click-and-fix technique has users self-serving fake system issues by invoking malicious PowerShell scripts themselves, reducing suspicion.

The no-click exploit launched in October infected computers in Europe and North America with the RomCom backdoor when victims were redirected through attacker-controlled websites.

While not production-ready malware, ‘Bootkitty' provides a proof of concept for exploiting Linux systems at boot-up — widening the UEFI attack path beyond the Windows ecosystem.

A report from the country’s intelligence service revealed tens of thousands of attacks during the first round of presidential elections and raised concerns about the upcoming runoff election.

Researchers released a proof-of-concept exploit for a path traversal flaw in the enterprise VoIP suite that, coupled with an arbitrary file read issue, can give attackers access to protected files, among other possible attack paths.

Attackers exploited a script injection vulnerability via GitHub Actions to inject malicious code during the automated build process, poisoning the resulting packages of the popular Python library.

The exploit takes advantage of a known file upload vulnerability that was not efficiently patched and can still be exploited in up-to-date versions of Cleo LexiCom, VLTrader and Harmony products.

An Akamai researcher found a feature built into Windows for people with disabilities can be abused by malware to steal data and control applications without EDR tools detecting it.

Take advantage of the Chunk method in LINQ to split large data sets into a sequence of chunks for more efficient processing.