Both incidents targeted outdated and unpatched ColdFusion servers and exploited a known vulnerability.
Compromised Windows systems can enable attackers to gain access to Google Workspace and Google Cloud by stealing access tokens and plaintext passwords.
New US Securities and Exchange Commission rules require reporting of breaches that are material, giving cyber extortionists a new tactic to coerce payments.
The highly targeted spear-phishing campaign uses Microsoft PowerPoint add-in and XLL, RAR attachments to deliver malware.
The Reptar vulnerability affects Intel processors with the new fast short repeat move (FSRM) feature.
A malicious OracleIV image has been downloaded more than 3,000 times from Docker Hub.
The Agonizing Serpens group seeks to steal sensitive information and then wipe systems.
The Gootloader malware gang's custom bot is designed to avoid detection during late stages of the attack chain.