Apache has fixed a critical security vulnerability in its open-source OFBiz (Open For Business) software, which could allow attackers to execute arbitrary code on vulnerable Linux and Windows servers.

Critical security flaw in OpenStack's Ironic project (CVE-2024-44082) exposes sensitive data. Learn more about the vulnerability and its impact.

Beware of Bitcoin ATM scams. The FTC reveals alarming figures—over $110 million lost in 2023 alone. Learn how criminals exploit these decentralized machines.

Uncover the advanced malware campaign known as DarkCracks. Learn how it exploits vulnerabilities in GLPI and WordPress websites for stealthy control.

Learn about the critical vulnerability, CVE-2024-7012, in Foreman. Discover how this flaw could enable unauthorized access to Red Hat Satellite.

Discover the tactics of Black Basta, one of the most dangerous extortion groups. Explore the use of large language models in cybersecurity.

Stay protected from critical vulnerabilities in Veeam ONE. Learn about CVE-2024-42024 & CVE-2024-42019 and the risks it poses to your virtual and data protection environments.

Protect yourself from the BeaverTail malware and InvisibleFerret backdoor used by Lazarus Group. Learn how the Contagious Interview campaign targets blockchain professionals and job seekers through deceptive tactics.

Discover the alarming tactics of the MuddyWater hacking group. Find out how they exploit legitimate software in their attacks.

Critical vulnerability (CVE-2024-7591) in Progress LoadMaster ADC and load balancer. Learn how unauthenticated, remote attackers can execute system commands.

The security researchers have disclosed technical details and PoC exploit code for a CVE-2024-26581 vulnerability within the Linux kernel

Veeam addressed 18 high and critical severity flaws in Veeam Backup & Replication, Service Provider Console, and One.

The US and its allies state that Russia-linked threat actors operating under the GRU are behind global critical infrastructure attacks.

Apache addressed a remote code execution vulnerability affecting the Apache OFBiz open-source enterprise resource planning (ERP) system.

Stay informed about the active exploitation of CVE-2024-40766. Discover how this critical access control vulnerability in SonicOS can compromise your security.

Our new report investigates cyberthreats aimed at child gamers.

$10 million reward for information on GRU hackers. Help identify the Russian military intelligence officers behind major cyberattacks.

While this issue was disclosed and patched in the V8 engine in June 2023, the WeChat Webview component was not updated, and still remained vulnerable when Talos reported it to the vendor.

Critical infrastructure plays a vital role in our daily lives. It encompasses the essential systems and services that support the functioning of society. From power plants to water treatment facilities, critical infrastructure ensures that communities have…

Talos' Nick Biasini discusses the biggest shifts and trends in the threat landscape so far. We also focus on one state sponsored actor that has been particularly active this year, and talk about why defenders need to be paying closer attention to infostealers.

As cybersecurity threats evolve in complexity and scale, the traditional approach to defending an organization’s digital assets has become…