Cybersecurity researchers have confirmed that threat actors are actively exploiting a severe authentication bypass vulnerability in unpatched Quest KACE Systems Management Appliance (SMA) devices, putting administrative...
The Shadowserver Foundation has disclosed that more than 900 instances of Sangoma’s FreePBX platform remain compromised with malicious web shells, following attacks that exploited a serious...
Fortinet has issued a warning regarding the active exploitation of a five-year-old vulnerability in FortiOS SSL VPN, which can allow attackers to bypass two-factor authentication (2FA)...
The high number of attacks on IoT devices represents a 400% increase in malware compared to the previous year, according to Zscaler. The increasing frequency of malware attacks...
Raven (Risk Analysis and Vulnerability Enumeration for CI/CD) is an open-source CI/CD pipeline security scanner that makes hidden risks visible by connecting the dots across vulnerabilities...
On Wednesday, Apple released security updates for all supported branches of iOS and iPadOS, macOS, tvOS, watchOS and Safari. This time around, the updates did not...
The Pwn2Own Toronto 2023 hacking competition has ended with security researchers earning $1,038,500 for 58 zero-day exploits (and multiple bug collisions) targeting consumer products between October...