ESET Direct Endpoint Management plugin for N-able N-sight RMM Service Release 2.0 has been released.
Researchers from Koi Security have detected 18 malicious Chrome and Edge extensions masquerading as benign productivity and entertainment tools
Check Point discovered around 500 suspected Scattered Spider phishing domains, suggesting the group is preparing to expand its targeting
Le Clusif organise une conférence le 23 octobre prochain en présentiel au Campus Cyber sur le thème des dépendances stratégiques et de leurs répercussions sur le paysage de la cybersécurité. Les dispositifs de sécurité des organisations reposent sur une collaboration étroite avec de multiples acteur...
Deptective, our new open-source tool, automatically finds the packages needed to install software dependencies. It does so not based on the software’s self-reported requirements, but by observing what the software needs at runtime.
Sonatype’s latest Open Source Malware Index report has identified more than 16,000 malicious open source packages, representing a 188% annual increase
The company behind AV/EDR evasion tool Shellter has confirmed the product is being used by threat actors
Las Vegas. August. Protocols are getting torn apart. This summer, PortSwigger returns to Black Hat USA and DEF CON 33 with a host of new talks, events and ways to meet PortSwigger and the the teams be
China’s Hikvision vows legal battle after Canada bans its operations, citing national security concerns
Trend Micro has observed the Bert ransomware group in operation since April 2025, with confirmed victims in sectors including healthcare, technology and event services
In 2024 we looked at the possibility of leveraging open weights LLMs for source code analysis. The answer was clearly negative, as a small code base could easily take 200K tokens, more than any context window offered by open weights models. The table below summarizes the top LLMs by context window a...
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiWeb may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.Fortinet has observed this to be exploited in the wild on F...
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager and FortiAnalyzer may allow an authenticated attacker with high privilege to extract database information via crafted requests. Revised on 2025-07-09 00:00:00
Le groupe hospitalier Ameos a été victime d'une attaque informatique, ce qui a entraîné la fermeture de ses systèmes numériques. Les hôpitaux de Mecklenburg-Vorpommern ont été touchés, avec des perturbations du trafic électronique et des services numériques. Les systèmes sont désormais de nouveau en...
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS cw_stad daemon may allow an authenticated attacker to execute arbitrary code or commands via specifically crafted requests. Revised on 2025-11-03 00:00:00
La ville de York a subi une cyberattaque l'été dernier, ce qui a entraîné une interruption de ses systèmes informatiques et a nécessité un paiement de rançon de 500 000 dollars. L'attaque a commencé le 8 juillet et a pris le contrôle de l'infrastructure informatique de la ville. Le montant payé repr...
La Perouse, LLC suffered a data breach due to unauthorized access to one of their third-party billing platforms, resulting in the potential exposure of patient billing information. The breach occurred in July 2025, and the company became aware of it on July 8, 2025. A cyberattack was claimed by Ever...
Important changes to Android devices took effect starting Monday.
ESET PSA plugin Service Release 2.3 is now available by logging in to the ESET PSA plugin portal.
Iran-aligned BladedFeline group has been observed targeting the government of Iraq and KRG with advanced malware