Over 1,300 Microsoft SharePoint servers exposed online remain unpatched against a spoofing vulnerability that was exploited as a zero-day an…

A Linux variant of the GoGra backdoor uses legitimate Microsoft infrastructure, relying on an Outlook inbox for stealthy payload delivery. […

France Titres, the government agency in France for issuing and managince administrative documents has disclosed a data breach after a threat…

Microsoft has released out-of-band (OOB) security updates to patch a critical ASP.NET Core privilege escalation vulnerability. [...]…

A previously undocumented data-wiping malware dubbed Lotus was used last year in targeted attacks against energy and utilities organizations…

Microsoft has released out-of-band updates to address a security vulnerability in ASP.NET Core that could allow an attacker to escalate priv…

Cybersecurity researchers have discovered a new variant of a known malware called LOTUSLITE that's distributed via a theme related to India'…

A critical security vulnerability has been disclosed in a Python-based sandbox called Terrarium that could result in arbitrary code executio…

Threat actors associated with The Gentlemen ransomware‑as‑a‑service (RaaS) operation have been observed attempting to deploy a known proxy m…

Cybersecurity researchers have identified 22 new vulnerabilities in popular models of serial-to-IP converters from Lantronix and Silex that …

As the technology landscape develops, the definition of cyber security is expanding with it.…

New advisory warns cyber threat group APT28 have exploited vulnerable edge devices to support malicious operations.…

Russian cyber actor APT28 exploit vulnerable routers to hijack DNS, enabling adversary‑in‑the‑middle attacks and theft of passwords and auth…

The NCSC has issued actions for individuals at risk of targeted attacks against messaging apps.…

The NCSC is encouraging UK organisations to mitigate an unauthenticated remote code execution vulnerability affecting F5 BIG-IP Access Polic…

&&#x23&#x3b;x26&#x3b;&#x23&#x3b;x5b&#x3b;This is a Guest Diary by L. Carty, an ISC intern as part of the SANS.edu Bachelor&&#x23&#x3b;x26&#…

There have been reports of threat actors using a .wav file as a vector for malware.
…

Every morning, security people around the world face the same ritual: opening their vulnerability feed to find a lot of new CVE entries tha…