Автор: Nate Nelson, Contributing Writer

The most popular office software suite in China actually has two critical vulnerabilities, which allowed hackers the opportunity for remote code execution. Time to patch.

LLM automation tools and vector databases can be rife with sensitive data — and vulnerable to pilfering.

A threat actor resembling APT41 performed "AppDomainManager Injection," which is like DLL sideloading, but arguably easier and stealthier.

The disclosure of CVE-2024-28987 means that, in two weeks, there have been two critical bugs and corresponding patches for SolarWinds’ less-often-discussed IT help desk software.

Ironically, Macs’ lower risk profile may make them more susceptible to any given threat than the average Windows or Linux system.

Analysts have been picking up increased cases of malware delivery via Windows Installer files in Southeast Asia.

A seven-month-old bug in an OSS CI/CD server is still being actively exploited, thanks to spotty patching, CISA warns.

Charming Kitten goes retro and consolidates its backdoor into a tighter package, abandoning the malware framework trend.

What is a Verizon Wireless demo store app doing on non-Verizon phones, and why is it a vehicle to an attacker?

When it comes to this year’s candidates and political campaigns fending off major cyberattacks, a lot has changed since the 2016 election cycle.