Google-owned Mandiant published a complete forensic reconstruction today of a sophisticated intrusion campaign that used a single maliciously crafted CSV file to achieve root-level control over Cisco ...

SecondFi confirmed three external attacks drained 16 million ADA ($2.4 million) from 374 wallets via a flaw in its proprietary wallet generation software; a patch has been rolled out for unaffected ...

Cardano wallet SecondFi traced the incident to an address-level issue and secured 129 million ADA after attackers drained funds from 374 addresses. A vulnerability in Cardano-based wallet SecondFi ...

Researchers disclosed usbliter8, a SecureROM exploit affecting older Apple devices that can bypass boot protections with physical access. Researchers at cybersecurity firm Paradigm Shift have revealed ...

A new BootROM vulnerability has been discovered in older iPhones using the A12 and A13 chips. It uses a hardware bug in the USB controller to gain access to an iPhone’s startup process. It can’t be ...

PCWorld reports Microsoft patched a record 206 security flaws in June 2024, including 19 critical remote code execution vulnerabilities affecting Windows kernel and HTTP services. One vulnerability in ...

Meta blames a bug on an exploit that allowed hackers to ask its AI support bot to link a victim’s account with their own email. Meta blames a bug on an exploit that allowed hackers to ask its AI ...

Cisco disclosed a critical server-side request forgery vulnerability in its Unified Communications Manager platform on Wednesday, and by Thursday morning working proof-of-concept exploit code was ...

A Palo Alto Networks vulnerability that allows attackers to establish unauthorized VPN access into corporate networks is being actively exploited in the wild, weeks after the company disclosed the ...

Hackers were able to trick Meta's AI into giving them access to any Instagram account they waned. Credit: Omar Marques/SOPA Images/LightRocket via Getty Images Meta — the parent company of Facebook, ...

The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend, after instructions ...

Attackers have reduced the time to develop an exploit for a known vulnerability from 125 days to a mere half a day, thanks to the use of AI-assisted development, leaving vulnerability scanners ...