The Open Web Application Security Project has recently introduced a new Top 10 project – the Non-Human Identity (NHI) Top 10. For years, OWASP has provided security professionals and developers… Read More »Do We Really Need The OWASP NHI Top 10?
A previously unknown threat actor has been observed copying the tradecraft associated with the Kremlin-aligned Gamaredon hacking group in its cyber attacks targeting Russian-speaking entities. The campaign has been attributed… Read More »GamaCopy Mimics Gamaredon Tactics in Cyber Espionage Targeting Russian Entities
Threat hunters have detailed an ongoing campaign that leverages a malware loader called MintsLoader to distribute secondary payloads such as the StealC information stealer and a legitimate open-source network computing… Read More »MintsLoader Delivers StealC Malware and BOINC in Targeted Cyber Attacks
A high-severity security flaw has been disclosed in Meta’s Llama large language model (LLM) framework that, if successfully exploited, could allow an attacker to execute arbitrary code on the llama-stack… Read More »Meta’s Llama Framework Flaw Exposes AI Systems to Remote Code Execution Risks
A group of academics has disclosed details of over 100 security vulnerabilities impacting LTE and 5G implementations that could be exploited by an attacker to disrupt access to service and… Read More »RANsacked: Over 100 Security Flaws Found in LTE and 5G Network Implementations
The modern workplace has undergone a seismic transformation over recent years, with hybrid work becoming the norm and businesses rapidly adopting cloud-based Software-as-a-Service (SaaS) applications to facilitate it. SaaS applications… Read More »2025 State of SaaS Backup and Recovery Report
The U.S. Department of Justice (DoJ) on Thursday indicted two North Korean nationals, a Mexican national, and two of its own citizens for their alleged involvement in the ongoing fraudulent… Read More »DoJ Indicts 5 Individuals for $866K North Korean IT Worker Scheme Violations
Google has launched a new feature called Identity Check for supported Android devices that locks sensitive settings behind biometric authentication when outside of trusted locations. “When you turn on Identity… Read More »Android’s New Identity Check Feature Locks Device Settings Outside Trusted Locations
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday placed a now-patched security flaw impacting the popular jQuery JavaScript library to its Known Exploited Vulnerabilities (KEV) catalog, based on… Read More »CISA Adds Five-Year-Old jQuery XSS Flaw to Exploited Vulnerabilities List
Enterprise-grade Juniper Networks routers have become the target of a custom backdoor as part of a campaign dubbed J-magic. According to the Black Lotus Labs team at Lumen Technologies, the… Read More »Custom Backdoor Exploiting Magic Packet Vulnerability in Juniper Routers