NIS 2 is coming, are you ready? The NIS2 directive aims to raise the standard of cybersecurity in Europe and brings new obligations and new penalties for… 4 minutes
Ransomware payments on track to smash $1.1 billion record Median payments to some strains are now $1.5 million—a 650% increase from early 2023. 1 minute
Update now! August Patch Tuesday covers several zero-days Microsoft’s August Patch Tuesday covers 90 Microsoft CVEs and includes nine actively-exploited zero-days. 2 minutes
Patch now! Microsoft Office flaw could leak NTLM hashes Microsoft is warning about a Microsoft Office vulnerability which an attacker could use to steal NTLM hashes. 3 minutes
Ransomware group disguises SharpRhino trojan as Angry IP Scanner Researchers have uncovered more details of a Hunters International campaign that uses search ads to spread the SharpRhino RAT. 1 minute
What is a path traversal vulnerability? What are path or directory traversal vulnerabilities, and how can you protect against them? 3 minutes
Azure outage was DDoS attack made worse by failed mitigation Microsoft says the recent outage affecting Azure and other cloud services was down to a DDoS attack and some faulty… 2 minutes
Patch now! ServiceNow vulnerabilities under active exploitation Up to 42,000 ServiceNow systems may be at risk of compromise. 1 minute
Google Workspace flaw allowed cybercriminals to impersonate domains Google claims it has since fixed the problem. 2 minutes
Biggest trial court in the US closed after ransomware attack The Los Angeles County Superior Court remained closed on Monday as it tried to recover from a ransomware attack. 1 minute
Fake CrowdStrike hot fix leads to Remcos Trojan To nobody's surprise, cybercriminals are abusing the CrowdStrike outage. 2 minutes
Why Microsoft? Why? A vulnerability in IE (yes! IE!) has been used for over a year as a zero-day to plant infostealers on… 3 minutes
Get patching! Old vCenter vulnerability actively abused CISA has added a two-year-old vulnerability in vCenter to its catalog of known exploited vulnerabilities 1 minute
22 minutes from PoC exploit to attacks—would you have patched in time? The speed at which you need to apply patches is increasing. Are you prepared? 2 minutes
GeoServer vulnerability actively abused, CISA warns CISA has added CVE-2024-36401 to its catalog of known exploited vulnerabilities. 2 minutes
Watch out for CRYSTALRAY, an open source aficionado with a hunger for crypto The CRYSTALRAY group, tracked by Sysdig, is using a suite of open source tools to find and compromise targets for… 1 minute
Patch now! July Patch Tuesday fixes two actively exploited vulnerabilities Microsoft's Patch Tuesday covers two actively exploited vulnerabilities, one Office Remote Code Execution (RCE) flaw, and many other CVEs 2 minutes
South Africa’s NHLS is recovering from a ransomware attack quickly, it just doesn’t feel that way It's estimated that the NHLS handles diagnostic tests for about 80% of South Africa's population. Ransomware groups don't care. 2 minutes
Alabama State Department of Education stops ransomware attack but the assault on US education continues More than 60% of global ransomware attacks on education happen in the USA. 2 minutes
Ransomware increases hospital deaths significantly New research shows that you don't want to be in a hospital when ransomware strikes. 1 minute