cyberintel.kalymoon.com · 48144 articles · updated every 4 hours · grows forever
A vulnerability was found in clerk javascript and classified as critical . Affected by this vulnerability is the function clerkFrontendApiProxy . The manipulation results in server-side request forger…
A vulnerability was found in mbed TLS up to 1.0.0/3.6.5 . It has been classified as critical . Affected by this issue is some unknown functionality of the component FFDH Key Export Handler . This mani…
A vulnerability was found in mbed TLS up to 3.6.5 . It has been declared as problematic . This affects an unknown part. Such manipulation leads to insufficient entropy in prng. This vulnerability is u…
A vulnerability was found in mbed TLS up to 3.6.5/4.0.0 . It has been rated as problematic . This vulnerability affects unknown code. Performing a manipulation results in algorithm downgrade. This vul…
A vulnerability categorized as critical has been discovered in mbed TLS up to 3.6.5 . This issue affects the function x509_inet_pton_ipv6 . Executing a manipulation can lead to buffer overflow. The id…
A vulnerability identified as problematic has been detected in krayin laravel-crm up to 2.2 . Impacted is the function composeMail of the file packages/Webkul/Admin/tests/e2e-pw/tests/mail/inbox.spec.…
A vulnerability labeled as problematic has been found in mbed TLS up to 3.6.5 . The affected element is an unknown function of the component FFDH Handler . The manipulation results in insufficient ent…
A vulnerability marked as problematic has been reported in mbed TLS up to 3.6.5/4.0.x . The impacted element is an unknown function. This manipulation causes insufficient entropy in prng. This vulnera…
Unit 42 discusses the supply chain attack targeting Axios. Learn about the full attack chain, from the dropper to forensic cleanup. The post Threat Brief: Widespread Impact of the Axios Supply Chain A…
Payment fraud has industrialized, and that's a defensive advantage. Learn how standardized attack infrastructure creates detectable patterns that financial institutions can act on before losses occur.
Five Practical Use Cases on How AI Is Transforming SOCs for Threat Mitigation AI is reshaping cybersecurity on both sides of the battlefield. While attackers use it to scale threats, defenders are usi…
Anthropic's Mythos Leak Points to Pattern of Failures, Sloppy Practices at AI Labs Anthropic accidentally exposed its most powerful unreleased AI model to compromise, and days later shipped its flagsh…
A sophisticated and long-running Magecart campaign has been quietly operating for over 24 months, infecting e-commerce websites across at least 12 countries using more than 100 malicious domains to st…
Developers can spend days using fuzzing tools to find security weaknesses in code. Alternatively, they can simply ask an LLM to do the job for them in seconds. The catch: LLMs are evolving so rapidly …
Hasbro, an American toy maker with more than 5,000 employees, confirmed a cyberattack and proactively took certain systems offline. The intrusion was detected on March 28, and the company promptly act…
The startup will expand its AI research team, train additional security models, and scale enterprise adoption. The post Depthfirst Raises $80 Million in Series B Funding appeared first on SecurityWeek…
Cyber threats across Latin America are increasingly targeting government systems, from disruptive attacks in Puerto Rico to a surge of probes against Colombia’s health sector.
A newly released study exclusively shared with Dark Reading details the unique circumstances that make up Latin America's labor pool, and why organizations may want to expand their talent search.
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new phishing campaign in which the cybersecurity agency itself was impersonated to distribute a remote administrati…
A new Android malware named NoVoice was found on Google Play, hidden in more than 50 apps that were downloaded at least 2.3 million times. [...]
A new malicious kit called EvilTokens integrates device code phishing capabilities, allowing attackers to hijack Microsoft accounts and provide advanced features for business email compromise attacks.…
Cybersecurity M&A Roundup: Cyber Giants Strengthen AI Security Offerings Infosecurity Magazine