Forums Security → Research

Latest news on security research

State Forum Posts Latest Post
open Canvassing apps used by UK political parties riddled with privacy, security issues 20
By teebie
open SLAP, Apple, and FLOP: Safari, Chrome at risk of data theft on iPhone, Mac, iPad Silicon 15
By haaz
open Ransomware crew abuses AWS native encryption, sets data-destruct timer for 7 days 5
open DNA sequencers found running ancient BIOS, posing risk to clinical research 24
open Crims backdoored the backdoors they supplied to other miscreants. Then the domains lapsed 13
open FireScam infostealer poses as Telegram Premium app to surveil Android devices 5
open Boffins trick AI model into giving up its secrets 20
By Rich 11
open Iran-linked crew used custom 'cyberweapon' in US critical infrastructure attacks 15
open Crooks stole AWS credentials from misconfigured sites then kept them in open S3 bucket 9
open Data broker leaves 600K+ sensitive files exposed online 22
open First-ever UEFI bootkit for Linux in the works, experts say 14
By Roopee
open 'Alarming' security bugs lay low in Linux's needrestart utility for 10 years 15
open Reminder: China-backed crews compromised 'multiple' US telcos in 'significant cyber espionage campaign' 5
open Don't open that 'copyright infringement' email attachment – it's an infostealer 21
open Cybercrooks are targeting Bengal cat lovers in Australia for some reason 15
By Deimos
open Criminals open DocuSign's Envelope API to make BEC special delivery 4
open Ongoing typosquatting campaign impersonates hundreds of popular npm packages 11
open Gang gobbles 15K credentials from cloud and email providers' garbage Git configs 2
open WhatsApp may expose the OS you use to run it – which could expose you to crooks 16
open Cloud threats have execs the most freaked out because they're not prepared 3
open Ransomware gang using stolen Microsoft Entra ID creds to bust into the cloud 6
open Thousands of orgs at risk of knowledge base data leaks via ServiceNow misconfigurations 7
open Putin really wants Trump back in the White House 268
open Feeld dating app's security too open-minded as private data swings into public view 8
open Mind your header! There's nothing refreshing about phishers' latest tactic 2
open If HDMI screen rips aren't good enough for you pirates, DeCENC is another way to beat web video DRM 37
By jabuzz
open How $20 and a lapsed domain allowed security pros to undermine internet integrity 19
open Novel attack on Windows spotted in phishing campaign run from and targeting China 3
open Tired of airport security queues? SQL inject yourself into the cockpit, claim researchers 28
By Rich 11
open 110K domains targeted in 'sophisticated' AWS cloud extortion campaign 4
open Digital wallets can allow purchases with stolen credit cards 36
open Multiple flaws in Microsoft macOS apps unpatched despite potential risks 21
open Google raps Iran's APT42 for raining down spear-phishing attacks 1
By ExpatZ
open China-linked cyber-spies infect Russian govt, IT sector 17
open It's 2024 and we're just getting round to stopping browsers insecurely accessing 0.0.0.0 39
open Small CSS tweaks can help nasty emails slip through Outlook's anti-phishing net 13
By Grogan
open Georgia's voter portal gets a crash course in client versus backend input validation 36
open Bad apps bypass Windows security alerts for six years using newly unveiled trick 16
open Sneaky SnakeKeylogger slithers into Windows inboxes to steal sensitive secrets 15
By ThatOne
open DARPA suggests turning old C code automatically into Rust – using AI, of course 146
open Proofpoint phishing palaver plagues millions with 'perfectly spoofed' emails from IBM, Nike, Disney, others 33
open Russia’s FIN7 is peddling its EDR-nerfing malware to ransomware gangs 5
open FBI gains access to Trump rally shooter's phone 115
open RADIUS networking protocol blasted into submission through MD5-based flaw 11
open Latest Ghostscript vulnerability haunts experts as the next big breach enabler 25
open Traeger security bugs bad news for grillers with neighborly beef 20
open CISA looked at C/C++ projects and found a lot of C/C++ code. Wanna redo any of it in Rust? 81
open Polyfill.io owner punches back at 'malicious defamation' amid domain shutdown 28
open 'Mirai-like' botnet observed attacking EOL Zyxel NAS devices 3
By druck
open Risk of installing dodgy extensions from Chrome store way worse than Google's letting on, study suggests 34
By Roland6

Page: