Threat actors have been observed exploiting multiple security flaws in various software products, including Progress Telerik UI for ASP.NET AJAX […]
XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells Read More »
Cybersecurity researchers have uncovered two malicious machine learning (ML) models on Hugging Face that leveraged an unusual technique of “broken”
Malicious ML Models on Hugging Face Leverage Broken Pickle Format to Evade Detection Read More »
On January 23, 2025, Cloudflare was notified via its Bug Bounty Program of a vulnerability in Cloudflare’s Mutual TLS (mTLS)
Resolving a Mutual TLS session resumption vulnerability Read More »
A cybercriminal acting under the monicker “emirking” offered 20 million OpenAI user login credentials this week, sharing what appeared to
20 Million OpenAI accounts offered for sale Read More »
A new audit of DeepSeek’s mobile app for the Apple iOS operating system has found glaring security issues, the foremost
DeepSeek App Transmits Sensitive User and Device Data Without Encryption Read More »
Cybersecurity requires creativity and thinking outside the box. It’s why more organizations are looking at people with soft skills and
Will AI threaten the role of human creativity in cyber threat detection? Read More »
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that a security flaw impacting Trimble Cityworks GIS-centric asset management
CISA Warns of Active Exploitation in Trimble Cityworks Vulnerability Leading to IIS RCE Read More »
The foundations for social engineering attacks – manipulating humans – might not have changed much over the years. It’s the
AI-Powered Social Engineering: Reinvented Threats Read More »
Microsoft is warning of an insecure practice wherein software developers are incorporating publicly disclosed ASP.NET machine keys from publicly accessible
