Your blog category
Multiple security flaws have been disclosed in VMware Workstation and Fusion products that could be exploited by threat actors to access sensitive information, trigger a denial-of-service (DoS) condition, and execute code under… Read More »VMware Patches Severe Security Flaws in Workstation and Fusion Products
Google on Monday shipped emergency fixes to address a new zero-day flaw in the Chrome web browser that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2024-4761,… Read More »New Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation
Cybersecurity researchers have uncovered an ongoing social engineering campaign that bombards enterprises with spam emails with the goal of obtaining initial access to their environments for follow-on exploitation. “The incident involves a… Read More »Ongoing Campaign Bombarded Enterprises with Spam Emails and Phone Calls
Deploying advanced authentication measures is key to helping organizations address their weakest cybersecurity link: their human users. Having some form of 2-factor authentication in place is a great start, but many organizations may… Read More »6 Mistakes Organizations Make When Deploying Advanced Authentication
The maintainers of the Cacti open-source network monitoring and fault management framework have addressed a dozen security flaws, including two critical issues that could lead to the execution of arbitrary code. The… Read More »Critical Flaws in Cacti Framework Could Let Attackers Execute Malicious Code
Apple and Google on Monday officially announced the rollout of a new feature that notifies users across both iOS and Android if a Bluetooth tracking device is being used to… Read More »Apple and Google Launch Cross-Platform Feature to Detect Unwanted Bluetooth Tracking Devices
The MITRE Corporation has officially made available a new threat-modeling framework called EMB3D for makers of embedded devices used in critical infrastructure environments. “The model provides a cultivated knowledge base of cyber… Read More »MITRE Unveils EMB3D: A Threat-Modeling Framework for Embedded Devices
With the browser becoming the most prevalent workspace in the enterprise, it is also turning into a popular attack vector for cyber attackers. From account takeovers to malicious extensions to phishing attacks, the… Read More »The 2024 Browser Security Report Uncovers How Every Web Session Could be a Security Minefield
The Black Basta ransomware-as-a-service (RaaS) operation has targeted more than 500 private industry and critical infrastructure entities in North America, Europe, and Australia since its emergence in April 2022. In… Read More »Black Basta Ransomware Strikes 500+ Entities Across North America, Europe, and Australia
Cybersecurity researchers have disclosed multiple security flaws in Cinterion cellular modems that could be potentially exploited by threat actors to access sensitive information and achieve code execution. “These vulnerabilities include… Read More »Severe Vulnerabilities in Cinterion Cellular Modems Pose Risks to Various Industries