Serious vulnerabilities in Cisco Nexus Dashboard give attackers a viable path to executing arbitrary commands as root, uploading container image files, or performing cross-site request forgery (CSRF) attacks....
Recent years have seen a growing interest in the use of machine learning and deep learning in cybersecurity, especially in network intrusion detection and prevention. However, according to...
Hackers are targeting websites using the PrestaShop platform, leveraging a previously unknown vulnerability chain to perform code execution and potentially steal customers’ payment information. The PrestaShop...
A new version of the Amadey Bot malware is distributed through the SmokeLoader malware, using software cracks and keygen sites as lures. Amadey Bot is a...
The operators of the QBot malware have been using the Windows Calculator to side-load the malicious payload on infected computers. DLL side-loading is a common attack...
Threat analysts have uncovered a new campaign attributed to APT37, a North Korean group of hackers, targeting high-value organizations in the Czech Republic, Poland, and other...
The Dutch Ministry of Education has decided to suspend the use of Chrome OS and Chrome web browser until August 2023 over concerns about data privacy....
The Transportation Security Administration reissued its pipeline cybersecurity directive to offer flexibility to operators. The Transportation Security Administration revised its cybersecurity guidelines for the nation’s critical...
NIST will accept comments on the updated draft publication regarding HIPAA’s Security Rule until September 21. The National Institute of Standards and Technology updated its guidance...
SonicWall has published a security advisory today to warn of a critical SQL injection flaw impacting the GMS (Global Management System) and Analytics On-Prem products. The...