De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
De multiples vulnérabilités ont été découvertes dans les produits Citrix. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
#1 ranked in 78 global reportsCategories: Products & ServicesTags: MDR, network, Endpoint, Firewall
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
On March 22, 2026, the Resolv DeFi protocol became the latest example of how quickly things can unravel in DeFi…
The post The Resolv Hack: How One Compromised Key Printed $23 Million appeared first on Chainalysis.
PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more! Infosec In Brief Russian intelligence-affiliated parties are posing as customer support services on commercial messaging applications such as Signal to compromise accounts and conduct p...
This week on the Lock and Code podcast, we speak with Rachel Swan about the simple network problems causing major train outages in the Bay.
How Are Organizations Tackling the Challenges of Non-Human Identities? What steps are organizations taking to secure their digital environments from machine-based threats? Both opportunities and challenges arise with the introduction of non-human identities (NHIs). These machine identities are pivot...
Are Non-Human Identities the Key to Effective Secrets Management? How do organizations protect their most sensitive secrets? The answer lies in the burgeoning field of Non-Human Identities (NHIs). With the rise of cloud technologies, the importance of managing NHIs effectively has never been more cr...
Several vulnerabilities were discovered in libyaml-syck-perl, a Perl module providing a fast, lightweight YAML loader and dumper, which may result in denial of service and potentially arbitrary code execution. For the oldstable distribution (bookworm), this problem has been fixed in version 1.34-2+d...
Russia-linked actors target WhatsApp and Signal accounts of officials and journalists via phishing, gaining access to messages and contacts. Threat actors linked to Russian Intelligence Services are running phishing campaigns to hijack high-value accounts on messaging apps like WhatsApp and Signal,...
Dear blog readers,
In this post I'll provide actionable intelligence based on the research and analysis which I posted in my previous "Dissecting the RAMP (Russian Anonymous Marketplace) Ransomware Forum - An Analysis" blog post and will provide actionable intelligence on various domain portfolios...
Dear blog readers,
In this post I'll provide actionable intelligence on all the BitCoin wallet addresses from the RAMP (Russian Anonymous Marketplace) forum members with the idea to assist the security community fellow researchers and U.S Law Enforcement on its way to properly track down and prosec...
Oracle fixed a critical severity flaw, tracked as CVE-2026-21992, enabling unauthenticated remote code execution in Identity Manager. Oracle released security updates to address a critical vulnerability, tracked as CVE-2026-21992 (CVSS score of 9.8), affecting Identity Manager and Web Services Manag...
Dear blog readers,
 Continuing the "When Data Mining Conti Leaks Leads to Actual Binaries and to a Hardcoded C2 With an Encryption Key on Tripod.com - Part Two" blog post series in this post I'll continue analyzing the next malicious software binary which I obtained by data mining Conti Leaks with...
Author, Creator & Presenter: Seth Law, Founder of Redpoint Security
Our thanks to BSidesSLC for publishing their Creators, Authors and Presenter’s outstanding BSidesSLC 2025 content on the Organizations' YouTube Channel.
The post BSidesSLC 2025 – Faces In The Fog – Seth Law On Unconventional U...
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple, Laravel Livewire and Craft CMS flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)Â added Apple, Laravel Livewire and Craft CMS flaws to its Known Exploited Vuln...
An information stealer called VoidStealer uses a new approach to bypass Chrome's Application-Bound Encryption (ABE) and extract the master key for decrypting sensitive data stored in the browser. [...]
The NTLM authentication method was always a beast. It is a proprietary protocol designed by Microsoft which was reverse engineered a long time ago. That effort resulted in the online documentation that I based the curl implementation on back in 2003. I then also wrote the NTLM code for wget while at...
The authentication layer that corporate America spent a decade building is now a liability.
Listen to the podcast:The day MFA became the problem
That’s the blunt assessment of Kevin Surace, chairman of Token, a Rochester, N.Y.-based security company … (more…)
The post FIRESIDE CHAT: In the AI age,...