Multiple vulnerabilities have been discovered in Fortinet products, the most severe of which could allow for arbitrary code execution. Depending on the privileges, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user.
Multiple vulnerabilities have been discovered in Mozilla products, the most severe of which could allow for arbitrary code execution. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts.
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user.
Sax LLP, also known as Sax Advisory Group, disclosed a 2024 data breach affecting its systems, which impacted over 228,000 individuals nationwide. The financial services firm identified unusual network activity on August 7, 2024, and took steps to secure their systems.
Software providers' terms and conditions tend to be lengthy, complex documents filled with legal jargon, making them difficult for the average user to understand. Terms and conditions for SaaS products lead to confusion and a lack of informed consent.
There has been an observed social engineering campaign posing as delivery failure notifications from the United States Postal Service (USPS). The message is addressed to a generic “customer” and directs the user to click the provided link to update their address details.
Iranian state-sponsored cyber threat actors—including groups operating under the direction of the Islamic Revolutionary Guard Corps (IRGC) and the Ministry of Intelligence and Security (MOIS)—represent a persistent and strategically motivated threat.
The University of Phoenix discovered a data breach involving its Oracle E-Business Suite platform. An unauthorized threat actor exploited a previously unknown software vulnerability in Oracle EBS to exfiltrate data within the University’s Oracle EBS environment.
Advanced persistent threat (APT) groups are integrating generative artificial intelligence (AI) into their cyber operations to accelerate and scale campaign coordination. Public and private reporting shows AI-assisted techniques emerging across the cyberattack lifecycle.
