Synology Issues a Rare Ransomware Warning: Outdated NAS Boxes Are Being Encrypted by C3RB3R 
Northflank Tells Every Customer to Rotate Secrets After a Breach, and Stolen AI Keys Are Already Being Used 
Attackers Are Trying to Catch WordPress Sites Mid-Update: The Race-Condition Flaw Fixed in 7.1.4, and a Checklist for Site Owners 
Run an Online Store on Drupal? Attackers Are Already Using a Commerce Core Flaw That Needs No Login. Five Steps for Today 
Attackers Are Crashing Cisco Firewalls Through Their VPN Login Page: The Three Conditions, the Fixed Versions and the Stopgap 
How a Friendly Email Turns Into a Hijacked Microsoft 365 Account: A Five-Step Walkthrough
Most people expect a phishing email to be clumsy and urgent. A campaign documented by Proofpoint researchers is neither. The...
A Months-Old SharePoint Flaw Is Now Under Attack: Your Questions Answered
A SharePoint weakness that looked minor when Microsoft fixed it in August has since been reclassified as something far more...
Cash App Warns 8.2 Million Customers of Insider Breach
Cash App, a subsidiary of U.S.-based payments company Block, says it has been breached. The incident happened on December 10,...
The Third-Party Okta Hack Is Bad
Authentication firm Okta's statements on the Lapsus$ breach fails to answer key questions. A DIGITAL EXTORTION group threw the security world into...
Apple Park partially evacuated after envelope with white powder substance was discovered
Part of the Apple Park campus in Cupertino was evacuated after first responders discovered an envelope containing a white powder...
FBI: Ransomware Gang Breached 52 U.S. Critical Infrastructure Orgs
Bleeping computer reported this was revealed in a joint TLP:WHITE flash alert published last week in coordination with the Cybersecurity...
Microsoft Warns About New App-Based Attack Angle
Microsoft has issued an advisory warning about “consent phishing,” or application-based phishing attacks that rely on users granting permissions to...
New Attack Targets Microsoft 365 Accounts Via Malicious Excel .SLK Files to Bypass Security
Using an old Excel filetype, attackers can bypass both Exchange Online Protection and Advanced Threat Protection to run malicious macros....
Can The Cloud Strengthen Business Continuity?
Cloud-based computing and the whole notion of SaaS (Software-as-a-Service) is becoming the most critical expertise for this era. According to...
Patching Urged as F5 BIG-IP Vulnerability Exploited
Researchers Say Exploited Flaw Could Lead to Complete System Compromises Security researchers warn that the number of exploit attempts targeting...
