Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,726 stories synthesized.
A malicious NuGet package impersonating Braintree's .NET library has been discovered, targeting production payment systems by intercepting live transaction data and stealing sensitive environment secrets.
A new paper proposes a typology of open-source software projects, arguing that understanding a project's origin and governance is crucial for assessing its security and stability risks.
Microsoft is advising organizations to accelerate Windows update deployment timelines due to AI advancements that shorten the window for attackers to exploit vulnerabilities.
Researchers uncover six critical vulnerabilities in the U-Boot bootloader, impacting embedded systems and server BMCs with risks of code execution and denial-of-service attacks.
Group-IB's Anastasia Tikhonova proposes integrating Software Bill of Materials (SBOMs) into daily security operations for enhanced vulnerability management and incident response.
A new report reveals that only 28% of financial sector employees use phishing-resistant multi-factor authentication, leaving the industry vulnerable to credential theft.
Codenotary's new AgentMon 3 platform uses AI to dynamically adjust security policies based on observed AI agent behavior and organizational workflows.
Angelo John Martino III, a former ransomware negotiator for DigitalMint, has been sentenced to 70 months in prison for defrauding clients and conspiring with BlackCat ransomware affiliates.
Dutch police have identified evidence suggesting local criminals played a role in the cyberattack on telecom provider Odido, which exposed the personal data of over 6 million customers.
Experts emphasize that transitioning to post-quantum cryptography is a vast organizational undertaking, extending far beyond technical implementation to encompass infrastructure, vendor management, and employee education.
An internal dispute within the OpenMandriva Linux project escalated into an attempted sabotage by a contributor with administrative privileges, involving repository wipes and malicious package pushes.
The European Commission is taking legal action against Spain, France, Ireland, and the Netherlands for failing to implement the NIS2 Directive on cybersecurity.
A prompt injection vulnerability in GitHub's Agentic Workflows allows attackers to exfiltrate data from private repositories via public issues.
A malicious version of the Injective SDK package was published on npm, compromising developers and potentially stealing cryptocurrency wallet private keys and seed phrases.
The Australian Cyber Security Centre (ACSC) has issued a warning about a widespread campaign exploiting numerous Content Management System (CMS) platforms and plugins, leading to the deployment of webshells and significant compromise.
Threat actors are using old, inactive GitHub accounts and compromised tokens to map out corporate organizations and repositories via the GitHub API, raising concerns about supply chain security.
The RedHook Android banking trojan has been updated to abuse ADB Wireless Debugging and the Shizuku tool, granting it shell-level access and silent permission escalation capabilities.
Cisco Talos reports China-nexus threat actor UAT-7810 is expanding its Operational Relay Box (ORB) networks using custom malware, exploiting vulnerabilities in unpatched routers to deploy new backdoors.
Microsoft has integrated MDASH, an AI-powered system, into its security workflow to proactively discover and patch vulnerabilities in Windows, leading to a significant increase in disclosed CVEs.
npm version 12 introduces significant security enhancements by disabling install scripts by default and deprecating granular access tokens that bypass two-factor authentication.
GitHub has implemented a new custom properties system to ensure every repository has a clearly defined owner, streamlining security workflows and accountability.
CISA has issued an advisory for a hard-coded credentials vulnerability in Schneider Electric's Easergy MiCOM Px40 Series protection relays, potentially exposing device identification data.
A critical vulnerability in the end-of-life OpenPLC v3 industrial control system software allows authenticated attackers to achieve arbitrary code execution.
CISA has issued an advisory detailing multiple vulnerabilities in Schneider Electric's PowerChute Serial Shutdown software, versions 1.4 and prior, posing significant risks to industrial control systems.