Skip to main content

Security News

Filter by:

Rackspace Ransomware Costs Soar to Nearly $12M

Rackspace's 2022 ransomware attack costs only continue to mount, with lawsuits in the offing — and show the long-tail costs of a cyberattack.
Dark Reading 16 Nov 2023 1330 Views

Samsung hit by new data breach impacting UK store customers

Samsung Electronics is notifying some of its customers of a data breach that exposed their personal information to an unauthorized individual. [...]
Bleepingcomputer 16 Nov 2023 1154 Views

YouTube cracks down on synthetic media with AI disclosure requirement

Several new policies aim to tackle realistic synthetic media head-on.
Ars Technica 16 Nov 2023 2985 Views

LockBit ransomware exploits Citrix Bleed in attacks, 10K servers exposed

The Lockbit ransomware attacks use publicly available exploits for the Citrix Bleed vulnerability (CVE-2023-4966) to breach the systems of large organizations, steal data, and encrypt files.
Bleeping Computer 15 Nov 2023 1286 Views

New Reptar CPU flaw impacts Intel desktop and server systems

Intel has fixed a high-severity CPU vulnerability in its modern desktop, server, mobile, and embedded CPUs, including the latest Alder Lake, Raptor Lake, and Sapphire Rapids microarchitectures.
Bleeping Computer 15 Nov 2023 1204 Views

The OWASP Top 10: What They Are and How to Test Them

This article takes a deep dive into the OWASP Top 10 and advises on how to test your web applications for susceptibility to these security risks. [...]
Bleepingcomputer 15 Nov 2023 1081 Views

VMware discloses critical VCD Appliance auth bypass with no patch

VMware disclosed a critical and unpatched authentication bypass vulnerability affecting Cloud Director appliance deployments.
Bleeping Computer 15 Nov 2023 1175 Views

CISA warns of actively exploited Juniper pre-auth RCE exploit chain

CISA warned federal agencies today to secure Juniper devices on their networks by Friday against four vulnerabilities now used in remote code execution (RCE) attacks as part of a pre-auth exploit chain. [...]
Bleepingcomputer 14 Nov 2023 1104 Views

Microsoft Warns of Fake Skills Assessment Portals Targeting IT Job Seekers

A sub-cluster within the infamous Lazarus Group has established new infrastructure that impersonates skills assessment portals as part of its social engineering campaigns. [...]
The Hacker News 11 Nov 2023 1118 Views

Cloudflare website downed by DDoS attack claimed by Anonymous Sudan

Cloudflare is investigating an ongoing outage causing 'We're sorry" Google errors to be shown on the company's website. [...]
Bleepingcomputer 10 Nov 2023 1089 Views