News Archive
Showing 24 of 105 articles. Use the numbered pages to browse the complete archive.
Quest KACE systems face active exploitation of a critical vulnerability requiring immediate patching. Enterprise administrators must update their systems now to prevent potential breaches.
BYOVD attacks exploit legitimate signed drivers to bypass security controls and gain kernel-level access to systems. Organizations must implement driver allowlisting and monitor for suspicious driver activity to prevent attackers from weaponizing trusted software against them.
Attackers are exploiting driver-level vulnerabilities to bypass EDR security tools, putting critical systems at risk. Organizations must update defenses immediately to detect and block these advanced evasion techniques.
Ransomware attacks and zero-day exploits demand immediate action before critical data is compromised. Organizations need robust incident response plans to detect, contain, and recover from these threats quickly.
CISA has flagged critical vulnerabilities in Zimbra and SharePoint requiring immediate action. Organizations must patch these exploited flaws now to prevent potential breaches and data theft.
Critical vulnerabilities in outdated Telnetd services expose legacy enterprise systems to remote attacks. Organizations must immediately implement network segmentation and access controls while planning system upgrades.
A critical unpatched vulnerability in Telnetd allows attackers to gain remote root access to affected systems. Organizations must immediately disable Telnet services and implement SSH as a secure alternative.
CISA has identified critical vulnerabilities in enterprise file transfer systems that attackers are actively exploiting. Organizations must immediately patch these flaws to prevent data breaches and system compromises.
Advanced persistent threats are infiltrating networks undetected for months, causing massive data breaches. Implementing robust detection and response systems now is critical to protect your organization.
AI systems face growing threats from data poisoning and prompt injection attacks. Enterprises must implement zero-trust architectures and continuous monitoring to protect AI models in 2024.
Critical infrastructure faces unprecedented cyber threats requiring immediate defense upgrades. Organizations must implement zero-trust architecture and real-time monitoring to protect essential services from nation-state attacks.
Remote code execution vulnerabilities in VPNs and remote access tools surged in 2024, enabling attackers to gain complete system control. Organizations must immediately patch critical flaws and implement zero-trust architecture to prevent devastating breaches.
Microsoft released an urgent out-of-band hotpatch for Windows 11 to fix a critical remote code execution flaw in RRAS that attackers could exploit. Organizations should apply this security update immediately.
A critical vulnerability in HPE Aruba Networking AOS-CX switches allows attackers to reset admin passwords without authentication. Organizations must patch immediately to prevent unauthorized access and network compromise.
Insider threats are projected to surge past 91,000 cases in 2026, with intellectual property theft increasingly bypassing traditional behavioral detection systems. Organizations must urgently upgrade security measures to combat this evolving risk.
AI-driven botnets are projected to compromise 40% of smart homes by 2026, exploiting vulnerabilities in connected devices. Homeowners must update IoT security now to prevent hackers from weaponizing their smart devices.
Cybercriminals now offer deepfake services that enable AI-powered impersonation attacks targeting banks and their customers. Financial institutions must act now to deploy detection tools before fraudsters exploit this growing threat.
Twelve percent of operational technology devices contain critical vulnerabilities that ransomware groups are actively exploiting to target critical infrastructure. Organizations must urgently patch these systems before attackers cause widespread operational disruptions.
Zero-day vulnerabilities in VPN and cloud services are actively exploited by attackers, putting remote workers at immediate risk. Enterprises must patch systems urgently and review access controls.
Mobiles & Tablets News: Google cybersecurity researchers are urging iPhone users to update their devices to the latest version of iOS immediately. This comes after the Google....
Apple just wrapped up a very exciting week of announcements – starting off with iPhone 17e, and ending with MacBook......
Barracuda warns that cybercriminals are increasingly targeting developer infrastructure in supply chain attacks. Organizations must urgently secure their development environments to prevent widespread breaches affecting multiple downstream customers.
Cybersecurity firm Armis warns that autonomous AI systems will likely cause a major enterprise breach by mid-2026. Organizations must prepare now for AI-driven threats that can operate independently.
Software companies cheered the elimination of a government-wide attestation mandate. What comes next could be messy. By Eric Geller • Jan. 28, 2026 · Subscribe to Cybersecurity Dive for top news,...