Endpoint

A suspected Iranian threat actor known as UNC3890 is gathering intel that could be used for kinetic strikes against global shipping targets.

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Unusually, SOVA, which targets US users, now allows lateral movement for deeper data access. Version 5 adds an encryption capability.

Four serious security issues on the popular appliance could be exploited by hackers with any level of access within the host network, Bitdefender researchers say.

The finding exposes the danger of older, unpatched bugs, which plague at least 4.5 million devices.

As the market for initial access brokers matures, services like Genesis — which offers elite access to compromised systems and slick, professional services — are raising the bar in the underground economy.

Over the past few weeks, a Mirai variant appears to have made a pivot from infecting new servers to maintaining remote access.

A dangerous VMware authentication-bypass bug could give threat actors administrative access over virtual machines.

The CVE-2022-27535 local privilege-escalation security vulnerability in the security software threatens remote and work-from-home users.

The identity-services company is being acquired by Thoma Bravo software investment for cash, before being delisted.

Copado's Kyle Tobener will discuss a three-pronged plan at Black Hat USA for addressing human weaknesses in cybersecurity with this medical concept — from phishing to shadow IT.

SMBs should patch CVE-2022-32548 now to avoid a host of horrors, including complete network compromise, ransomware, state-sponsored attacks, and more.

Phishing operators are taking advantage of security bugs in the Amex and Snapchat websites (the latter is unpatched) to steer victims to phishing pages looking to harvest Google and Microsoft logins.

New finding comes amid report of overall surge in threats targeting mobile and IoT devices over the past year.

Attackers are turning to stolen credentials and posing as trusted applications to socially engineer victims, according to Google study of malware submitted to VirusTotal.