TL;DR ConnectWise is rotating its code signing certificates for ScreenConnect, ConnectWise Automate, and ConnectWise RMM due to security concerns. This proactive measure aims to enhance the securit...
Discover how a cloud brute-force attack exploited Google's authentication systems, exposing users' phone numbers and highlighting critical security flaws.
TL;DR The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical security flaws affecting Erlang/Open Telecom Platform (OTP) SSH and Roundcube to its Known Exploited Vu...
Discover how Apple's new open-source containerization framework is set to revolutionize the performance and security of Linux VMs on macOS. Read on for detailed insights and implications.
TL;DR Airlines have been selling detailed passenger data to the Department of Homeland Security (DHS). A contract reveals that airlines forbid the DHS from disclosing this practice. This rai...
TL;DR Adobe has released a significant security update addressing 254 vulnerabilities, primarily affecting Adobe Experience Manager (AEM). The patch includes critical fixes for AEM Cloud Service an...
Discover the alarming prevalence of mobile scams and their impact on users, as revealed by Malwarebytes' latest research.
Explore the critical arbitrary code injection vulnerability in Laravel Pulse 1.3.1. Learn about the risks, impacts, and necessary precautions to protect your applications.
TL;DR A critical security flaw in the Wazuh Server, now patched, has been exploited by threat actors to deploy two Mirai botnet variants for conducting DDoS attacks. Akamai first detected this cam...
TL;DR Shadow IT includes unsanctioned apps, dormant accounts, and unmanaged identities, posing significant security risks. Relying solely on IdP (Identity Provider) or CASB (Cloud Access Secur...