Millions of Apple Airplay-Enabled Devices Can Be Hacked via Wi-Fi

Researchers reveal a collection of bugs known as AirBorne that would allow any hacker on the same Wi-Fi network as a third-party AirPlay-enabled device to surreptitiously run their own code on it.

Zabbix Urges Upgrades After Critical SQL Injection Bug Disclosure

Code Found Online Exploits LogoFAIL To Install Bootkitty Linux Backdoor

Telco Security Is A Dumpster Fire And Everyone's Getting Burned

Russian APT Chained Firefox and Windows Zero-Days Against US and European Targets

ProjectSend Vulnerability Exploited In The Wild

Ubuntu Affected By 10-Year-Old Flaws In needrestart Package

MITRE Updates List Of 25 Most Dangerous Software Vulnerabilities

D-Link Tells Users To Trash Old VPN Routers Due To Bug

Helldown Ransomware Evolves To Target VMware Systems Via Linux

Apple Confirms Zero Day Attacks Hitting macOS Systems

Oracle Patches Exploited Agile PLM Zero-Day

Palo Alto Sounds Alarm Over PAN-OS Zero Day Attacks

Discontinued GeoVision Products Targeted In Botnet Attacks

Palo Alto Networks Confirms New Firewall Zero-Day Exploitation

Fortinet Patches VPN Flaw That Provided Privilege Escalation

Five Eyes Infosec Agencies List 2024's Most Exploited Software Flaws

Citrix, Cisco, Fortinet Zero-Days Among 2023's Most Exploited Vulnerabilities

Ivanti Patches 50 Vulnerabilities Across Several Products

Intel And AMD Have Released Many Advisories

November Patch Tuesday Brings Cornucopia Of 89 Fixes To Windows

Critical NAS-ty Flaw Strikes D-Link Storage Boxes

Amazon Confirms Employee Data Exposed In Leak Linked TO MOVEit Vulnerability

Palo Alto Networks Expedition Vulnerability Exploited In Attacks

Unpatched Vulnerabilities Allow Hacking Of Mazda Cars

Cisco Patches Critical Vuln In Industrial Networking Solution

Trump Plans To Dismantle AI Safeguards After Victory

Google Patches Two Android Vulnerabilities Exploited In Targeted Attacks

Google's Big Sleep LLM Agent Discovers Exploitable Bug In SQLite

DocuSign Abused To Deliver Fake Invoices

Thousands Of Hacked TP-Link Routers Used In Yearslong Account Takeovers

Why The Long Name? Okta Discloses Auth Bypass Bug Affecting 52-Character Usernames

Windows Themes 0-Day Bug Exposes Users To NTLM Credential Theft

Yahoo Discloses NetIQ iManager Flaws Allowing Remote Code Execution

Intel And AMD Chips Still Vulnerable To Spectre Flaw

AI Bug Bounty Program Yields 34 Flaws In Open Source Tools

Here's The Paper No One Read Before Declaring The Demise Of Modern Cryptography

ChatGPT Jailbreak: Researchers Bypass AI Safeguards Using Hexadecimal Encoding And Emojis

Windows Update Takeover Lets An Attacker Revive A Patched Vuln

Admins Better Spring Into Action Over Latest Critical Vuln

AWS Cloud Development Kit Flaw Exposed Accounts To Full Takeover

Third-Party Vendors Drive 45% Of Breaches In Energy Sector

White House Endorses Collaboration With Cybersecurity Researchers

Cisco Patches Vulnerability Exploited In Large Scale Brute Force Campaign

SEC Fines 4 Firms Related To SolarWinds Case

FortiGate Admins Report Active Exploitation 0-Day. Vendor Isn't Talking.

White Hat Hackers Earn $500,000 On First Day Of Pwn2Own Ireland 2024

macOS HM Surf Vuln Might Already Be Under Exploit By Malware

Researchers Discover Flaws In 5 End-To-End Encrypted Cloud Services

Google Warns Of Samsung Zero Day Exploited In The Wild

Grafana Critical Vulnerability Risks Remote Code Execution

North Korean APT Exploited IE Zero Day In Supply Chain Attack

Microsoft: macOS Vulnerability Potentially Exploited In Adware Attacks

Threat Actors Exploit Zero Days Within 5 Days, Says Mandiant

F5 BIG-IP Updates Patch High Severity Privilege Escalation

Critical Bug In Kubernetes Image Builder Allows SSH Root Access

WeChat Devs Introduced Security Flaws When They Modded TLS

Jetpack Patches Critical Bug That Exposed Data On 27 Million WordPress Sites

CISA Flags Critical SolarWinds Web Help Desk Bug

Iranian Cyberspies Exploiting Recent Windows Kernel Vuln