Threat actors target military technologies to gain a strategic advantage, access classified information, and compromise national security. 

Creates, a popular online retailer of hair styling tools, has suffered a significant data breach that exposed credit card details

National security officials have been sounding the alarm over a China-linked hacking group that’s been targeting critical infrastructure.

Atlassian has released a security update addressing CVE-2024-21678 (CVSS 8.5), a high-severity stored cross-site scripting vulnerability

The Spring Framework, a cornerstone of countless enterprise Java applications, recently revealed a significant vulnerability (CVE-2024-22243)

VMware has issued an urgent advisory to administrators to remove a deprecated authentication plugin vulnerable to severe security threats.

Researchers from Shadowserver Foundation identified roughly 28,000 internet-facing Microsoft Exchange servers vulnerable to CVE-2024-21410.

ConnectWise has alerted users of its ScreenConnect remote access software to patch their systems immediately due to two severe vulnerabilities.

SqliSniper is a robust Python tool designed to detect time-based blind SQL injections in HTTP request headers.

CloudMiner represents a groundbreaking approach to leveraging Azure Automation service without incurring any costs.

Domains associated with Operation Texonto were found linked to potential influence operations aimed at Russian citizens

The General Data Protection Regulation (GDPR) has significantly impacted how European businesses collect, store, use, and share personal data. Implemented in 2018, the GDPR has ushered in a new era of data privacy rights and

The Signal messenger app will soon begin rolling out usernames to replace phone numbers, making them the default option from now on.

The U.S. State Department is now also offering rewards of up to $15 million to anyone who can provide information about LockBit ransomware gang members and their associates.

Both technical details and proof-of-concept exploits are available for the two vulnerabilities ConnectWise disclosed earlier this week for ScreenConnect, its remote desktop and access software.

CISA, the FBI, and the Environmental Protection Agency (EPA) shared a list of defense measures U.S. water utilities should implement to better defend their systems against cyberattacks

A threat actor is using an open-source network mapping tool named SSH-Snake to look for private keys undetected and move laterally on the victim infrastructure.

Two Chinese nationals face 20 years in prison after being caught and convicted of submitting over 5,000 fake iPhones worth more than $3 million to Apple with the goal of having them replaced with genuine devices.

The technology giant has come under heavy criticism for not making robust logging features available by default. 

Security researchers are warning of hackers abusing the Google Cloud Run service to distribute massive volumes of banking trojans like Astaroth, Mekotio, and Ousaban.