Apache addressed a remote code execution vulnerability affecting the Apache OFBiz open-source enterprise resource planning (ERP) system.

Stay informed about the active exploitation of CVE-2024-40766. Discover how this critical access control vulnerability in SonicOS can compromise your security.

Our new report investigates cyberthreats aimed at child gamers.

$10 million reward for information on GRU hackers. Help identify the Russian military intelligence officers behind major cyberattacks.

While this issue was disclosed and patched in the V8 engine in June 2023, the WeChat Webview component was not updated, and still remained vulnerable when Talos reported it to the vendor.

Critical infrastructure plays a vital role in our daily lives. It encompasses the essential systems and services that support the functioning of society. From power plants to water treatment facilities, critical infrastructure ensures that communities have…

Talos' Nick Biasini discusses the biggest shifts and trends in the threat landscape so far. We also focus on one state sponsored actor that has been particularly active this year, and talk about why defenders need to be paying closer attention to infostealers.

As cybersecurity threats evolve in complexity and scale, the traditional approach to defending an organization’s digital assets has become…

SonicWall is warning that a recently fixed access control flaw tracked as CVE-2024-40766 in SonicOS is now "potentially" exploited in attacks, urging admins to apply patches as soon as possible.

A new Android malware named SpyAgent uses optical character recognition (OCR) technology to steal cryptocurrency wallet recovery phrases from screenshots stored on the mobile device.

​After Office 2024 launches in October, Microsoft will disable ActiveX controls by default in Word, Excel, PowerPoint, and Visio client apps.

The company, Tosan, which provides IT services to 45% of the country’s banks, has paid $561,000 worth of bitcoin so far. 

American car rental giant Avis disclosed a data breach after attackers breached one of its business applications last month and stole customer personal information.

​Transport for London, the city's public transportation agency, revealed today that its staff has limited access to systems and email due to measures implemented in response to a Sunday cyberattack.

U.S. officials said they expect Russia, Iran and China to increase the cadence of influence operations targeting voters over the final two months of this election cycle.

Learn about Tropic Trooper, a cyber espionage group that has expanded its focus to the Middle East, targeting government entities.

Beware of Netflix phishing emails! Learn how cybercriminals impersonate Netflix to steal sensitive information and how to protect yourself.

Uncover the sophistication of the Supercar Phishing Kit: a new level of phishing tactics targeting Microsoft 365 users.

Discover the powerful Babylon Remote Access Trojan (RAT) used in a cyber espionage campaign targeting political figures in Malaysia. Find out how it works and its impact.

Critical security advisory: Learn about CVE-2024-7923, an authentication bypass flaw in Red Hat Pulpcore affecting Satellite deployments.

Stay informed about the latest cybersecurity threat: SideWalk malware targeting critical vulnerability in GeoServer.