ZDNET’s pick for best value VPN just got cheaper. Through April 30, you can save and score three months free on Surfshark VPN and antivirus plans. This article has been indexed from Latest stories for ZDNET in Security Read the…
Category: EN
Intel Sells Majority Stake In Altera To Silver Lake
Intel sells 51 percent of programmable chip unit Altera to Silver Lake Partners in deal that values it at half its acquisition price This article has been indexed from Silicon UK Read the original article: Intel Sells Majority Stake In…
Apple Leads Smartphone Market In First Quarter
Apple tops smartphone sales worldwide in first quarter after iPhone 16e launch, in spite of sagging demand in US, Europe, China This article has been indexed from Silicon UK Read the original article: Apple Leads Smartphone Market In First Quarter
Over 100,000 WordPress Plugin Vulnerability Exploited Just 4 Hours After Disclosure
Over 100,000 WordPress websites have been exposed to a critical security vulnerability, following the public disclosure of a flaw in the popular SureTriggers plugin (version 1.0.78 and below) on April 10, 2025. Exploitation attempts were observed within just four hours…
CentreStack 0-Day Exploit Enables Remote Code Execution on Web Servers
A critical 0-day vulnerability has been disclosed in CentreStack, a popular enterprise cloud storage and collaboration platform, which could allow attackers to execute arbitrary code remotely on affected web servers. The vulnerability, tracked as CVE-2025-30406, leverages a flaw in the…
Hertz disclosed a data breach following 2024 Cleo zero-day attack
Hertz Corporation disclosed a data breach after customer data was stolen via Cleo zero-day exploits in late 2024, affecting Hertz, Thrifty, and Dollar brands. Car rental giant Hertz Corporation disclosed a data breach that impacted its Hertz, Thrifty, and Dollar…
The Hidden Cost of Backup Recovery in Ransomware Events
Ransomware preparedness isn’t just about having backups – it’s about how quickly you can use them to recover. The post The Hidden Cost of Backup Recovery in Ransomware Events appeared first on Security Boulevard. This article has been indexed from…
Tax Season’s Silent Threat: The Importance of Securing the Software Supply Chain
In 2023, the Federal Trade Commission (FTC) released a warning to five of the most popular tax preparation companies, stating they could face civil penalties if they used confidential data collected from consumers – for unrelated purposes. Two years after…
Over 100,000 WordPress Plugin VUlnerability Exploited Just 4 Hours After Disclosure
Over 100,000 WordPress websites have been exposed to a critical security vulnerability, following the public disclosure of a flaw in the popular SureTriggers plugin (version 1.0.78 and below) on April 10, 2025. Exploitation attempts were observed within just four hours…
Cookie pop-ups don’t have to be a fact of life online – how I block them and why
There are legitimate uses for cookies but they have a dark side too. This article has been indexed from Latest stories for ZDNET in Security Read the original article: Cookie pop-ups don’t have to be a fact of life online…
EU gives staff ‘burner phones, laptops’ for US visits
That would put America on the same level as China for espionage The European Commission is giving staffers visiting the US on official business burner laptops and phones to avoid espionage attempts, according to the Financial Times.… This article has…
FTC Argues Meta Must Sell Instagram, WhatsApp
FTC tells court Meta created barriers to entry with its purchases of WhatsApp, Instagram to create illegal monopoly This article has been indexed from Silicon UK Read the original article: FTC Argues Meta Must Sell Instagram, WhatsApp
Gladinet flaw CVE-2025-30406 actively exploited in the wild
Huntress reports active exploitation of Gladinet CVE-2025-30406 in the wild, affecting seven organizations and 120 endpoints. Security researchers at Huntress warn of attacks in the wild exploiting a critical vulnerability, tracked as CVE-2025-30406, in Gladinet CentreStack and Triofox software. The…
macOS Users Beware! Hackers Allegedly Offering Full System Control Malwares for Rent
A new concerning threat has emerged in the cybercriminal ecosystem targeting Apple users. A sophisticated macOS malware-as-a-service offering called “iNARi Loader” is being advertised on underground forums. This high-priced stealer represents an alarming evolution in the growing landscape of macOS-specific…
Samsung Galaxy S24 Vulnerability Let Create Arbitrary Files on Affected Installations
A significant vulnerability in Samsung Galaxy S24 devices that allows network-adjacent attackers to create arbitrary files on affected installations. The flaw, identified as CVE-2024-49421, was publicly announced on April 9, 2025, as part of the Pwn2Own competition findings. The vulnerability,…
Seemplicity adds AI-driven capabilities to scale remediation operations
Seemplicity announced a major product release. This latest version of the Seemplicity Platform introduces powerful new AI-driven capabilities designed to streamline and scale remediation operations. Two major new features – called “Find the Fixer” and “Automatic Scoping” – reduce remediation…
Slopsquatting risks, Morocco leak, EC ups US-based staff security
AI code dependencies are a supply chain risk Morocco investigates social security leak European Commission increases security measures for US-bound staff Thanks to this week’s episode sponsor, Vanta Do you know the status of your compliance controls right now? Like…right…
Apache Roller Vulnerability Allows Hackers to Bypass Access Controls
A newly disclosed vulnerability in Apache Roller, the popular open-source blog server, could allow attackers to bypass critical access controls and retain unauthorized access to accounts even after password changes. The flaw, tracked as CVE-2025-24859, was announced by the Apache Roller…
Hackers Use Microsoft Teams Chats to Deliver Malware to Windows PCs
A sophisticated cyberattack campaign has emerged, leveraging Microsoft Teams chats to infiltrate Windows PCs with malware, according to a recent report by cybersecurity firm ReliaQuest. The attack, which began surfacing in March 2025 and primarily targets the finance and professional…
Online Services Again Abused to Exfiltrate Data, (Tue, Apr 15th)
If Attackers can abuse free online services, they will do for sure! Why spend time to deploy a C2 infrastructure if you have plenty of ways to use “official” services. Not only, they don't cost any money but the traffic…