The EU Council has adopted the Cyber Resilience Act (CRA), establishing cybersecurity requirements for products with digital elements. The objective of this legislation is to ensure that connected cameras, refrigerators, televisions, and toys enter...
In mid-September of this year, researchers from FortiGuard Labs uncovered an attack in which an unidentified threat actor exploited vulnerabilities in Ivanti’s Cloud Services Appliance (CSA). One of the three discovered vulnerabilities was already...
SonicWall specialists have detected new activity from the CoreWarrior malware — a resilient trojan spreading at an alarming rate. The virus generates dozens of its copies and connects to numerous IP addresses, creating backdoors...
Hackers have breached a service provider for Verizon and stolen data related to the Push-to-Talk (PTT) system that the company offers to government agencies and emergency services. The data is now being sold on...
On July 10, 2024, Palo Alto issued an advisory regarding vulnerability CVE-2024-5910, which allowed attackers to remotely reset administrator credentials in the Expedition application. Though not widely known, Expedition is designed to facilitate and...
In recent days, robot vacuum cleaners have been hacked across the United States, as reported by ABC News. Hackers not only gained control over the devices but also used their speakers to issue offensive...
Educational institutions have increasingly become frequent targets of cyberattacks, facing thousands of incidents each week. According to Microsoft’s May “Cyber Signals” report, this sector ranked third in the number of attacks during the second...
Security researchers from Sophos X-Ops have discovered that hacking groups are actively exploiting a critical vulnerability in the Veeam Backup & Replication (VBR) system, enabling attackers to remotely execute code on vulnerable servers. The...
GitLab has released security updates for both its Community Edition (CE) and Enterprise Edition (EE), addressing eight vulnerabilities, including a critical flaw that could allow the execution of CI/CD pipelines on arbitrary branches. One...
Thousands of machine learning tools, including developments from major tech companies, have become accessible online, allowing anyone to interact with them and potentially expose confidential data. A security researcher shared his findings with 404...
The number of malicious packages within the open-source ecosystem has surged dramatically over the past year, as highlighted by a recent report from Sonatype. Experts noted that the volume of malicious components deliberately uploaded...
U.S. intelligence agencies are warning of cyberattacks by Iranian hackers aimed at undermining trust in the upcoming U.S. elections. According to experts, political campaign staff are particularly vulnerable, becoming prime targets for these malicious...
