Information Security News

While data is king, context is his queen — together, they reign over domains that thrive on research, analysis, discovery, and exploration. Nowhere is this more evident than in cyber threat intelligence, where raw data alone is powerless without...

Researchers uncovered a critical security vulnerability in Rails applications that leverages the Bootsnap caching library. This exploit allows attackers to achieve remote code execution (RCE) by exploiting an arbitrary file write vulnerability.  The issue is particularly concerning as Bootsnap has been...

A critical security flaw in Windows File Explorer, identified as CVE-2024-38100, has been actively exploited, raising alarms across the cybersecurity community. This vulnerability, categorized as an Elevation of Privilege (EoP) issue, allows attackers to gain administrator-level access to affected systems. Vulnerability...

A former CIA analyst, Asif William Rahman, 34, pleaded guilty today to unlawfully retaining and transmitting Top Secret National Defense Information, which was later leaked on social media in October 2024. Federal officials have described Rahman’s actions as a...

A significant cybersecurity threat involving North Korean hackers exploiting LinkedIn as an entry point to infiltrate organizations.  This attack has been particularly evident in Japan, where there has been a significant rise in instances of unauthorized access, resulting in significant...

Threat actor IntelBroker allegedly breached Hewlett Packard Enterprise (HPE) and claimed responsibility for the intrusion on a dark web forum. This incident has significant consequences because it allegedly involves private GitHub repositories, Docker builds, SAP Hybris, certificates (both private and...

Ivanti addressed multiple severe vulnerabilities in its Endpoint Manager (EPM) software, potentially exposing organizations to significant data breaches. The most alarming of these flaws are four critical path traversal vulnerabilities that could allow unauthorized access to sensitive information. The vulnerabilities, identified...

A newly disclosed vulnerability in Kubernetes, CVE-2024-9042, has raised concerns within the cloud-native community. This security flaw specifically affects Windows worker nodes and could allow attackers to execute arbitrary commands on the host system by exploiting the `/logs` endpoint of...

Quantum computing is both a game-changer and a problem. Traditional computers use bits (0s and 1s) to process information, and quantum computers use qubits, which can be in multiple states at the same time thanks to superposition and entanglement....

Researchers have demonstrated a method to bypass Windows 11's BitLocker encryption, enabling the extraction of Full Volume Encryption Keys (FVEKs) from memory. This vulnerability underscores the risks associated with physical access attacks and highlights potential weaknesses in memory protection mechanisms. The...