The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a vulnerability linked to the supply chain compromise of the GitHub Action, tj-actions/changed-files, to its Known ...

This also means that ... The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity security flaw impacting NAKIVO Backup & Replication software to its Known Exploited ...

JUST IN, THURSDAY MORNING: 💀 CISA just flagged this backup flaw as actively exploited! CVE-2024-48248 | Unauthenticated file read in NAKIVO Backup & Replication exposes sensitive data ...

The new Russian ransomware program — accessible to affiliates at $5,000 — offers variants targeting Windows, Linux, BSD, ARM, ...

The group, tracked by ESET as FamousSparrow, was seen deploying two undocumented variants of the known SparrowDoor backdoor with new parallel command execution capabilities. The notorious China ...

Hackers have started probing servers impacted by a critical-severity vulnerability in the web application development framework Next.js.

CISA added CVE-2024-4040 to its Known Exploited Vulnerabilities catalog, ordering U.S. federal agencies to secure vulnerable servers on their networks within a week. In November 2023, CrushFTP ...

Sergiu is a news reporter who has covered the latest cybersecurity and technology developments for over a decade. Email or Twitter DMs for tips. Microsoft has fixed a known issue causing some USB ...