Endpoint

Analysts find that 98% of QNAP NAS are vulnerable to CVE-2022-27596, which allows unauthenticated, remote SQL code injection.

Two security holes — one particularly gnarly — could allow hackers the freedom to do as they wish with the popular edge equipment.

Findings underscore security awareness training that leverages practical, hands-on exercises is essential to creating a security-aware culture.

Google Fi mobile customers have been alerted that their SIM card serial numbers, phone numbers, and other data were exposed in T-Mobile hack.

The incidents are the latest indication of the growing popularity of dangerous disk wipers, created to disrupt and degrade critical infrastructure and other organizations.

The Instagram rate-limiting bug, found by a rookie hunter, could be exploited to bypass Facebook 2FA in vulnerable apps, researcher reports.

Users searching for Bitwarden and 1Password's Web vaults on Google have recently reported seeing paid ads with links to cleverly spoofed sites for stealing credentials to their password vaults.

A nasty SSRF bug in Web Services plagues a laundry list of enterprise printers.

Hackers don't need a key to get past your defenses if they can essentially teleport using RMMs, warns CISA and the NSA.

After Berlin pledged tanks for Ukraine, some German websites were knocked offline temporarily by Killnet DDoS attacks.

Only one in 10 enterprises will create a robust zero-trust foundation in the next three years, while more than half of attacks won't even be prevented by it, according to Gartner.

Expect more regulatory and enforcement action in the US and around the world.

Two common attacks against on-premises Kerberos authentication servers — known as Pass the Ticket and Silver Ticket — can be used against Microsoft's Azure AD Kerberos, a security firms says.

Encrypted backups for several GoTo remote work tools were exfiltrated from LastPass, along with encryption keys.