Unpatched Apache Tomcat Servers Spread Mirai Botnet Malware

MOVEit Bug Tied To Breach Of Up To 11M Records Via Govt Contractor

Exploitation Of Recent Citrix ShareFile RCE Vulnerability Begins

US Senator Blasts Microsoft For Negligent Cybersecurity Practices

Two New Vulnerabilities Could Affect 40% Of Ubuntu Cloud Workloads

Axis Door Controller Vulnerability Exposes Facilities to Threats

AMD Zenbleed Chip Bug Leaks Secrets Fast And Easy

Apple Patches Another Kernel Flaw Exploited In Operation Triangulation

China-Backed Hackers Suspected In NetScaler RCE Attacks

WebBoss.io CMS Concerns: A Tale Of Neglect And Unresponsiveness

Researchers Find Backdoor In Encrypted Police And Military Radios

MOVEit Hack Could Earn Cybercriminals $100 Million

OpenMeetings Flaws Allow Hackers To Execute Code And Hijack

NetScaler RCE Abused To Pilfer Critical Infra Active Directory Data

BMC Firmware Flaw Affecting Millions Gives Superuser Access

DDoS Botnets Exploiting Recent Zyxel Vulnerability

The Tail Of The MOVEit Hack May Be Longer Than We Realize

Two Jira Plugin Vulnerabilities In Attacker Crosshairs

Mass Attack On WordPress Sites Targets Bug In WooCommerce Plugin

How A Cloud Flaw Gave Chinese Spies A Key To Microsoft

Adobe Patches Critical ColdFusion, InDesign Zero Day Bugs

Google Researchers Discover In-The-Wild Exploitation Of Zimbra Zero Day

Microsoft Fixes 130 CVE Listed Bugs, 5 Flaws Exploited

Rockwell Automation Exploit Spurs Fears Of Critical Infrastructure Security

WordPress Security Plugin Caught Logging Plaintext Passwords

Juniper Networks Patches High Severity Vulnerabilities

Windows Loophole Exploited To Give Malware Kernel Access

Microsoft Warns Of Office Zero Day Attacks, No Patch Available

Apple Releases, Quickly Pulls Rapid Security Response Update For 0-Day WebKit Bug

Clever Letscall Vishing Malware Targets Android Phones

Truebot RCE Attacks Exploit Critical Netwrix Auditor Bug

Shell Confirms MOVEit-Related Breach After Ransomware Group Leaks Data

How We Found Another GitHub Action Environment Injection Vulnerability In A Google Project

RAM-Ramming Rowhammer Is Back To Uniquely Fingerprint Devices

Mastodon Fixes Critical TootRoot Vuln Allowing Node Jacking

330K FortiGate Firewalls Are Unpatched And Open To RCE Attacks

Log4j Bug Exploited To Push Novel EarlyRat Malware

MOVEit Hackers Find Simpler Business Model Than Ransomware

Critical Authentication Bypass Found In Arcserve Backup System

S3 Ep141: What was Steve Jobs’s first job?

Latest episode - listen now! (Full transcript inside.)

Interested in $10,000,000? Ready to turn in the Clop ransomware crew?

Technically, it's "up to $10 million", but it's potentially a LOT of money, nevertheless...

SMBs Plagued By Exploits, Trojans, And Backdoors

Hundreds Of Federal Network Devices Fail New CISA Requirements

Siemens Energy, UCLA Latest Confirmed Victims In MOVEit Hack

UK hacker busted in Spain gets 5 years over Twitter hack and more

Not just that infamous Twitter hack, but SIM-swapping, stalking and swatting too...

Millions Of GitHub Repos Potentially Vulnerable To RepoJacking

Fortinet Fixes Critical RCE Flaw In FortiNAC Zero Trust Product

Microsoft's Bootkit Patches Offer False Sense Of Security Against BlackLotus Threat, NSA Says

S3 Ep140: So you think you know ransomware?

Lots to learn this week - listen now! (Full transcript inside.)

Apple Squashes Kernel Bug Used By TriangleDB Spyware

Now Patched VMware Zero-Day Bug Exploited In Wild

Progress Software Hit With Class Action Suit Over MOVEit Hack

Asus Patches Highly Critical WiFi Router Flaws

Megaupload duo will go to prison at last, but Kim Dotcom fights on…

One, sadly, has died, and two are heading to prison, but for Kim Dotcom, the saga goes on...

MOVEit Customers Urged To Patch Third Critical Vulnerability

Progress Software Rushes To Patch Another MOVEit SQL Vulnerability

S3 Ep139: Are password rules like running through rain?

Latest episode - listen now! (Full transcript inside.)

US Government Agencies Hit In Global Cyber Attack

XSS Vulnerabilities In Azure Led To Unauthorized Access In User Sessions

Fortinet Warns Customers Of Possible Zero Day Exploited In Limited Attacks