Zeljka Zorz

MITRE has shared a timeline of the recent breach if fell victim to and has confirmed that it began earlier than previously thought.

A new attack method dubbed TunnelVision (CVE-2024-3661) can be used to intercept and snoop on VPN users' traffic.

CISA has announced the creation of "Vulnrichment," a new project that aims to fill the CVE enrichment gap created by NVD's recent slowdown.

When a threat actor named "InteIBroker" put up for sale "access to one of the largest cyber security companies", Zscaler began investigating.

Eclypsium researchers have published details and PoC exploits for two remotely exploitable injection vulnerabilities (CVE-2024-21793, CVE-2024-26026) affecting F5's BIG-IP Next Central Manager.

Google has fixed a Chrome zero-day vulnerability (CVE-2024-4671), an exploit for which exists in the wild.

Black Basta, one of the most prolific ransomware-as-a-service operators, is trying out a combination of email DDoS and vishing.

Apple has added a new capability to iOS 17 that will alert users if an unknown Bluetooth tracker is "seen" moving with them.

On this Patch Tuesday, Microsoft has released fixes for 59 vulnerabilities, including two zero-days (CVE-2024-30051, CVE-2024-30040).

Threat actors are taking advantage of the flawed design of Foxit PDF Reader's alerts to deliver malware via booby-trapped PDF documents, Check Point researchers have warned.