Vulnerabilities/Threats

A nasty SSRF bug in Web Services plagues a laundry list of enterprise printers.

Google has mounted a massive takedown, but Dragonbridge's extensive capabilities for generating and distributing vast amounts of largely spammy content calls into question the motivation behind the group.

An academic analysis of website defacement behavior by 241 new hackers shows there are four clear trajectories they can take in future, researchers say.

OpenAI's chatbot has the promise to revolutionize how security practitioners work.

Highlighting continued attacks on game developers, attackers stole source code from and issued a ransom demand to the maker of League of Legends.

Hackers don't need a key to get past your defenses if they can essentially teleport using RMMs, warns CISA and the NSA.

The US Department of Justice hacked into Hive's infrastructure, made off with hundreds of decryptors, and seized the gang's operations.

The security vulnerability allows attackers to spoof a target certificate and masquerade as any website, among other things.

Don't make perfect the enemy of good in vulnerability management. Context is key — prioritize vulnerabilities that are actually exploitable. Act quickly if the vulnerability is on a potential attack path to a critical asset.

The DPRK has turned crypto scams into big business to replenish its depleted state coffers.

Machine learning offers great opportunities, but it still can't replace human experts.

Hackers cleverly cobbled together a suite of open source software — including a novel RAT — and hijacked servers owned by ordinary businesses.

The company will block the configuration files, which interact with Web applications — since threat actors increasingly use the capability to install malicious code.

When EVs and smart chargers plug in to critical infrastructure, what can go wrong? Plenty.