Latest

F5 Networks has confirmed a security breach attributed to state-sponsored hackers who maintained long-term access to parts of the company’s internal systems. The attackers reportedly stole confidential data, including source code for the BIG-IP platform and details about previously undisclosed vulnerabilities. What Happened In a filing with the U.

Scientists from the University of California San Diego and the University of Maryland have uncovered a major privacy and security flaw affecting satellite communications worldwide. Their three-year study revealed that roughly half of all geostationary satellite transmissions are sent without encryption, exposing sensitive data from corporations, governments, and everyday users—

AMD has released patches for a critical vulnerability known as RMPocalypse, which undermines the security of Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP) — the company’s flagship confidential computing technology. Discovery and Technical Details Researchers from the Swiss Federal Institute of Technology Zurich (ETH Zurich) discovered that the flaw

As part of October’s Patch Tuesday, Microsoft has released fixes for 173 vulnerabilities across its products including six zero-day flaws and two vulnerabilities already under active exploitation. Overview of Zero-Days and Actively Exploited Bugs This month’s updates address two publicly disclosed zero-day vulnerabilities in Windows SMB Server and

A newly discovered side-channel attack called Pixnapping allows a malicious Android application to extract confidential data without requiring any special permissions, by stealing individual pixels displayed by other applications or websites. The attack enables the reconstruction of sensitive information such as messages from secure messengers, emails, and two-factor authentication (2FA)

Approximately 200,000 Linux-based systems from American manufacturer Framework were shipped with signed UEFI shell components that can be exploited to bypass Secure Boot protections. Attackers could leverage this flaw to install bootkits capable of evading operating system–level defenses and persisting even after a full system reinstall. Discovery and

Threat actors are exploiting the legitimate npm infrastructure in a new phishing campaign dubbed Beamglea. Unlike typical npm-based attacks, these malicious packages do not execute harmful code locally. Instead, they abuse the legitimate unpkg[.]com CDN service to host and display phishing pages to victims. In late September, security researchers