Category Security

Feb 20, 2025Ravie LakshmananSoftware Security / Vulnerability Microsoft has released security updates to address two Critical-rated flaws impacting Bing and Power Pages, including one that has come under active exploitation in the wild. The vulnerabilities are listed below – CVE-2025-21355…

Feb 20, 2025Ravie LakshmananVulnerability / IT Security Citrix has released security updates for a high-severity security flaw impacting NetScaler Console (formerly NetScaler ADM) and NetScaler Agent that could lead to privilege escalation under certain conditions. The vulnerability, tracked as CVE-2024-12284,…

From shadowy Bitcoin exchanges to Interpol’s most wanted, Alexander Vinnik was the alleged kingpin behind BTC-e, a $4bn crypto laundering empire. Learn more about him, and how he became a geopolitical pawn between the US, France, and Russia. Plus! Hear…

Russian state-aligned threat actors are ramping up efforts to spy on Ukrainian military and government officials via their secure messaging applications, including Signal Messenger and WhatsApp, Google revealed today. One of the main ways these groups are targeting Signal Messenger…

Several countries are “relentlessly” seeking information about Australia’s military capabilities, including the country’s submarine partnership with the UK and the US, warned Mike Burgess, Director-General of the Australian Security Intelligence Organisation (ASIO). The country’s head spy gave his Annual Threat…

Feb 19, 2025Ravie LakshmananMobile Security / Cyber Espionage Multiple Russia-aligned threat actors have been observed targeting individuals of interest via the privacy-focused messaging app Signal to gain unauthorized access to their accounts. “The most novel and widely used technique underpinning…

A critical vulnerability in the Jupiter X Core WordPress plugin, used on over 90,000 websites, has been identified by security researchers. The flaw, discovered on January 6, allows attackers with contributor privileges or higher to upload malicious SVG files and…

British financial technology firm Finastra has notified customers impacted by a data breach that occurred over three months ago. Between October 31 and November 8 2024, an unauthorized third party accessed the company’s secure file transfer platform (SFTP), used to…

The growing demand for cybersecurity and compliance services presents a great opportunity for Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) to offer virtual Chief Information Security Officer (vCISO) services—delivering high-level cybersecurity leadership without the cost of a…

Australian IVF clinic Genea has revealed that it has suffered a cyber incident, resulting in data being accessed by an unauthorized third party. In a statement on February 19, the clinic said it is “urgently investigating” the incident to understand…