Trezor has disclosed that an additional 67,000 U.S. customers were affected by a data breach at its third-party shipping provider, ShipMonk, significantly expanding the scope of an incident first reported in August.
Broadcom has released security updates for VMware Workstation and Fusion to address two vulnerabilities that could allow attackers with administrative privileges inside a virtual machine to execute code on the underlying host system.
The threat actor Nimbus Manticore has expanded its attack toolkit with a new backdoor resembling TWOSTROKE, along with an SSH tunneling utility designed to facilitate covert access and maintain communication with compromised environments.
Cybercriminal group Slim Spider has targeted a Brazilian financial institution in an operation focused on stealing sensitive information associated with cryptocurrency custody operations.
Security researchers have demonstrated a ChatGPT attack technique in which a malicious instruction planted inside a conversation could silently turn the AI assistant into a data-exfiltration tool.
Threat actors are actively exploiting two newly disclosed PaperCut vulnerabilities to gain unauthorized access, execute commands, create privileged accounts, and steal credentials from educational organizations across the United States and Europe.
Cybercriminals don’t always break through strong security systems.
You might meet someone online who seems like the perfect partner.
One brief each morning: the advisories that matter, the noise removed.
Double opt-in. One-click unsubscribe in every email. We never sell addresses.
Subscribe for walkthroughs and security tips.