Security researchers have created a list of flaws commonly abused by ransomware gangs to infiltrate a victim's network. Allan Liska, a member of Recorded Future's Computer Security Incident Response Team (CSIRT), made a call to action on Twitter to…

AMD has disclosed a vulnerability contained by the AMD Platform Security Processor (PSP) chipset driver. Threat actors could exploit this vulnerability to dump memory pages and steal sensitive information, such as passwords and storage decryption keys.…

The Continuous Integration and Continuous Delivery (CI/CD) service for cloud platform projects, Travis CI, has addressed a severe security flaw, which exposed API keys, access tokens, and credentials, posing a significant threat to businesses that set…

Bitdefender has announced the release of a free, universal decryption key for REvil ransomware victims to recover their locked data. The tool, created by Bitdefender together with an unnamed law enforcement, can restore files from REvil attacks before…

The U.S. Homeland Security Department's Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Coast Guard Cyber Command (CGCYBER) warn of the exploitation of a recently disclosed vulnerability…

Threat actors posed as U.S. Department of Transportation (DOT) officials in a phishing campaign shortly after Congress took action on a $1 trillion infrastructure package. As fake DOT officials, the attackers invited targets to bid for some of the $1…

A new study by the VPN provider NordVPN draws further attention to the possibility of hackers gaining access to a smart TV's camera and microphone through malware. Findings from the study reveal that nearly 60 percent of Americans own smart TVs, but many…

Researchers at the cybersecurity firm SentinelOne have released details about a flaw in the HP OMEN driver software, which leaves millions of HP OMEN gaming laptops and desktop computers exposed to attacks. The security vulnerability,…

Ransomware operators are amplifying their campaigns with double, triple, and quadruple extortion models. Researchers at Trend Micro analyzed threat data from the first six months of 2021, finding that ransomware remained one of the most significant…

Researchers at the cloud security vendor Wiz have discovered four critical vulnerabilities in Open Management Infrastructure (OMI), a little-known service deployed on a large number of Linux virtual machines (VMs) in Azure. According to the Wiz…

Apple has released security updates that address a critical zero-day vulnerability affecting iPhones, iPads, Apple Watches, and Mac computers. The security flaw, called FORCEDENTRY, was reportedly exploited to push Pegasus spyware from Israel's NSO Group…

Quantum Key Distribution (QKD) is a secure communication method that uses particles of light known as photons to encode data in quantum bits, which are transmitted to a sender and receiver in the form of an encryption key. Although QKD is…