Hackers Exploiting Critical Fortinet EMS Vulnerability to Deploy Remote Access Tools

Resilient Cybersecurity ($39.99 Value) FREE for a Limited Time

Reconstruct your defense strategy in an evolving cyber world

Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus Malware

The Lazarus Group, an infamous threat actor linked to the Democratic People's Republic of Korea (DPRK), has been observed leveraging a "complex infection chain" targeting at least two employees belonging to an unnamed n...

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

The developers of Rspack have revealed that two of their npm packages, @rspack/core and @rspack/cli, were compromised in a software supply chain attack that allowed a malicious actor to publish malicious versions to the...

ASPM Simplified: Secure Your Open Source with ActiveState

Elevate your application security posture with ActiveState. Automatically identify, prioritize, and remediate vulnerabilities in your open source code. Our intelligent solutions empower you to build secure and compliant software, reducing risk and accelerating time-to-market.

Sophos Issues Hotfixes for Critical Firewall Flaws: Update to Prevent Exploitation

Sophos has released hotfixes to address three security flaws in Sophos Firewall products that could be exploited to achieve remote code execution and allow privileged system access under certain conditions. Of the three...

Hackers Exploiting Critical Fortinet EMS Vulnerability to Deploy Remote Access Tools

A now-patched critical security flaw impacting Fortinet FortiClient EMS is being exploited by malicious actors as part of a cyber campaign that installed remote desktop software such as AnyDesk and ScreenConnect. ...

Experience the Power of Automated PenTesting—Join a Live vPenTest Demo

Discover vPenTest, the affordable SaaS platform for automated network penetration testing. Fast, accurate, and compliance-ready.

CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities List

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products to the Known Exploited Vu...

Thousands Download Malicious npm Libraries Impersonating Legitimate Tools

Threat actors have been observed uploading malicious typosquats of legitimate npm packages such as typescript-eslint and @types/node that have racked up thousands of downloads on the package registry. The counterfeit ve...

Resilient Cybersecurity ($39.99 Value) FREE for a Limited Time

Reconstruct your defense strategy in an evolving cyber world