A security flaw impacting the Wi-Fi Test Suite could enable unauthenticated local attackers to execute arbitrary code with elevated privileges. The CERT Coordination Center (CERT/CC) said the vulnerability, tracked as… Read More »Researchers Discover Command Injection Flaw in Wi-Fi Alliance’s Test Suite
Apple has publicly made available its Private Cloud Compute (PCC) Virtual Research Environment (VRE), allowing the research community to inspect and verify the privacy and security guarantees of its offering.… Read More »Apple Opens PCC Source Code for Researchers to Identify Bugs in Cloud AI Security
Artificial Intelligence (AI) has rapidly evolved from a futuristic concept to a potent weapon in the hands of bad actors. Today, AI-based attacks are not just theoretical threats—they’re happening across… Read More »Eliminating AI Deepfake Threats: Is Your Identity Security AI-Proof?
The U.S. Securities and Exchange Commission (SEC) has charged four current and former public companies for making “materially misleading disclosures” related to the large-scale cyber attack that stemmed from the… Read More »SEC Charges 4 Companies Over Misleading SolarWinds Cyberattack Disclosures
The Irish data protection watchdog on Thursday fined LinkedIn €310 million ($335 million) for violating the privacy of its users by conducting behavioral analyses of personal data for targeted advertising.… Read More »Irish Watchdog Imposes Record €310 Million Fine on LinkedIn for GDPR Violations
Cybersecurity researchers have discovered an advanced version of the Qilin ransomware sporting increased sophistication and tactics to evade detection. The new variant is being tracked by cybersecurity firm Halcyon under… Read More »New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics
Cybersecurity researchers have disclosed a security flaw impacting Amazon Web Services (AWS) Cloud Development Kit (CDK) that could have resulted in an account takeover under specific circumstances. “The impact of… Read More »AWS Cloud Development Kit Vulnerability Exposes Users to Potential Account Takeover Risks
Cisco on Wednesday said it has released updates to address an actively exploited security flaw in its Adaptive Security Appliance (ASA) that could lead to a denial-of-service (DoS) condition. The… Read More »Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability Under Active Attack
Sometimes, it turns out that the answers we struggled so hard to find were sitting right in front of us for so long that we somehow overlooked them. When the… Read More »Why Phishing-Resistant MFA Is No Longer Optional: The Hidden Risks of Legacy MFA
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a now-patched security flaw in Google Chrome to seize control of infected devices.… Read More »Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices