Hackers obtained unauthorized HTTPS certificates for several Google domains and hijacked domains in the country-code top-level domains (ccTLDs) for Ghana, American Samoa, and Sierra Leone after compromising third-party operators and modifying authoritative DNS records. [...]
U.S. officials say Zhang Yu was a prominent figure in the Hafnium campaign, which saw hackers breach thousands of computers and steal troves of documents.
The regulations on âcontrolled unclassified informationâ include security rules and requirements for reporting when theyâre breached, including by cyberattacks.
The post Major rules for federal contractors handling sensitive data are nearing the finish line appeared first on CyberScoop.
Michael Randrianantenaina discovered that GStreamer's Ugly Plugins
incorrectly handled certain malformed RealMedia files. If a user were
tricked into opening a crafted media file, an attacker could possibly use
this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS,
Ubuntu 1...
Trusted brand impersonation without the usual browser certificate warnings spells trouble
Cisco Talosâ Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft.The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Ciscoâs third-party vulnerability disclosure policy....
How to prevent budget overruns in the information security department, and what cyber risks the cost of AI tokens poses to the SOC.
It was discovered that Go Networking did not properly handle server
errors after sending a GOAWAY frame during HTTP/2 connection shutdown,
which could cause the connection to hang. A remote attacker could
possibly use this issue to cause a denial of service. (CVE-2022-27664)
It was discovered that...
Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6.
Google's own systems were not breached, but any domain ending in .gh (Ghana), .sl (Sierra Leone) or .as (American Samoa) was put at...
Lawmakers who oversee military cyber policy as well as the Fort Meade, Maryland, hub for those agencies say an $11 million mental health program should be locked in to defense spending legislation.
The investigation into the incident revealed cybercriminals were able to breach the Fines/Fees and Restitution Enforcement (FARE) Program, a statewide program that helps the court collect outstanding debts tied to traffic and criminal violations.
SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions. SonicWall released hotfixes for four vulnerabilities in its SMA1000 remote access appliances, including a critical flaw tracked as CVE-2026-102255 (CVSS score of 10...
Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts.
The campaign has been codenamed MALFEX by CloudSEK and Checkmarx. The activity is assessed to be the work of a...
Strands Box is the latest open source AI control tool from the cloud giant; like its predecessors, it promises tighter reins on autonomous agents
EnchÚres sur TikTok : rétractation, retours et garanties, les droits des acheteurs face aux vendeurs professionnels.
It was discovered that Apache HTTP Server's mod_rewrite module incorrectly
handled memory when performing certain variable lookups. A remote attacker
could possibly use this issue to cause a denial of service or execute
arbitrary code. (CVE-2026-56154)
Lucian Nitescu, Simon Kappel, and Gianluca Dan...
Router maker rejects allegations it misled buyers about protection and its reliance on Chinese suppliers
Big Tech AI labs are collecting unprecedented amounts of your business data. Here's how you can protect it from exploitation
Some of the material appeared to be recorded or stolen video of girls through interactions on social media sites like Snapchat, TikTok, Instagram and Facebook.
The post FBI, French authorities seize deepfake CSAM-for-sale websites appeared first on CyberScoop.
CIA officer David Rush, who worked on highly sensitive intelligence programs, reached a plea deal with U.S. prosecutors after he was caught siphoning money and gold with a fake government contract.