Biztonsági szemle

Vulnerable Apache RocketMQ instances impacted by the critical remote code execution bug, tracked as CVE-2023-33246, are being targeted by the Muhstik botnet to facilitate more expansive distributed denial-of-service and cryptocurrency mining...

Ongoing intrusions exploiting a pair of old remote code execution flaws in the widely used open-source web app framework ThinkPHP, tracked as CVE-2018-20062 and CVE-2019-9082, have been conducted by Chinese hackers since April, following a similar...

Attacks leveraging breached VPN credentials have been deployed by the new Fog ransomware operation against organizations in the U.S. education sector since early last month, BleepingComputer reports.

Establishing a clear process for developers to respond to critical CVEs is essential for having a rapid and coordinated response.

Each insider threat incident averages a $15 million loss, so teams really need to rethink their plans to mitigate these threats.

The FBI’s assistant cyber director outlined its efforts to disrupt threat actors as its victim support strategies evolve.

Researchers with Google say they uncovered and shut down a number of government disinformation campaigns.

One monitoring firm has detected exploitation attempts targeting CVE-2024-24919 from more than 780 unique IP addresses in the past week.

Attackers are taking advantage of misconfigured containers to deploy cryptocurrency mining software.

Application security in 2024 is challenged by the familiar, but security pros have new weapons to help even the score.

Four suspects were taken into custody, accused of paying intermediaries in Moldova to inform criminals of their Red Notice status and wipe law-enforcement flags from the system.