Information published.
Information published.
Threat actors with ties to the Democratic People's Republic of Korea (DPRK or North Korea) have been instrumental in driving a surge in global cryptocurrency theft in 2025, accounting for at least $2.02 billion out of more than $3.4 billion stolen from January through early December.
The figure repr...
Information published.
Information published.
Think your Kindle is harmless? Think again! In this episode, we unpack a Black Hat Europe talk revealing how a boobytrapped audiobook could exploit the Amazon eBook reader - potentially letting an attacker break into your account and seize control of your credit card.
Plus a blast from 2021's "su...
Information published.
Information published.
Explore homomorphic encryption for privacy-preserving analytics in Model Context Protocol (MCP) deployments, addressing post-quantum security challenges. Learn how to secure your AI infrastructure with Gopher Security.
The post Homomorphic Encryption for Privacy-Preserving MCP Analytics in a Post-Qu...
Information published.
A Chinese-linked threat group identified as âInk Dragonâ is targeting common weaknesses in Internet Information Services (IIS) servers to build a global espionage network that is difficult to track or disrupt, security vendor Check Point has reported.
Also nicknamed âEarth...
Une vulnérabilité a été découverte dans Sonicwall Secure Mobile Access. Elle permet à un attaquant de provoquer une élévation de privilÚges. Sonicwall indique que cette vulnérabilité est exploitée conjointement avec la vulnérabilité CVE-2025-23006 qui permet une exécution de code arbitraire à ...
Une vulnérabilité a été découverte dans les produits Cisco. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance avec les droits administrateurs. Cisco indique que cette vulnérabilité est activement exploitée et fournit des recommandations dans son bulletin de...
La commission scolaire Eastern Townships a dĂ©tectĂ© une attaque informatique visant ses serveurs, mais ses bases de donnĂ©es ne semblent pas avoir Ă©tĂ© affectĂ©es. Les Ă©quipements Ă lâorigine de lâattaque ont Ă©tĂ© identifiĂ©s et mis hors fonction. Les services informatiques ne seront pas disponibles le le...
De multiples vulnérabilités ont été découvertes dans Mattermost Server. Elles permettent à un attaquant de provoquer des problÚmes de sécurité non spécifiés par l'éditeur.
Creating a golden image of an operating system (OS) is a popular and recommended practice for deploying a new system to any environment, whether it's a data center or public cloud. This enables rapid deployment of systems that are easy to maintain and conforms to your unique Standard Operating Envi...
Earthbound Holding, LLC experienced a data security incident on December 18, 2025, which may have involved personal information, including names and Social Security numbers. The incident was discovered on December 18, 2025, and the company took steps to secure the network and investigate. The breach...
La société Aesto, LLC a été victime d'un incident de sécurité réseau qui a affecté une partie limitée de son infrastructure Amazon Web Services, exposant potentiellement des informations de santé protégées. L'incident s'est produit entre le 2 décembre 2025 et le 18 décembre 2025. Aesto ne dispose d'...
The Zeroday Cloud hacking competition in London has awarded researchers $320,000 for demonstrating critical remote code execution vulnerabilities in components used in cloud infrastructure. [...]
Attacker interest in the vulnerability is magnified by an unparalleled number of publicly available exploits, earning the defect the highest verified public exploit count of any CVE ever.
The post React2Shell fallout spreads to sensitive targets as public exploits hit all-time high appeared first on...