Security News

Hackers exploit Roundcube webmail flaw to steal email, credentials
2024-10-21 21:14

Threat actors have been exploiting a vulnerability in the Roundcube Webmail client to target government organizations in the Commonwealth of Independent States (CIS) region, the successor of the...

Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Login Credentials
2024-10-20 07:37

Unknown threat actors have been observed attempting to exploit a now-patched security flaw in the open-source Roundcube webmail software as part of a phishing attack designed to steal user...

Critical default credential in Kubernetes Image Builder allows SSH root access
2024-10-16 21:58

It's called leaving the door wide open – especially in Proxmox A critical bug in Kubernetes Image Builder could allow unauthorized SSH access to virtual machines (VMs) thanks to default...

Critical hardcoded SolarWinds credential now exploited in the wild
2024-10-16 20:00

Another blow for IT software house and its customers A critical, hardcoded login credential in SolarWinds' Web Help Desk line has been exploited in the wild by criminals, according to the US...

CISSP and CompTIA Security+ lead as most desired security credentials
2024-10-14 03:30

33.9% of tech professionals report a shortage of AI security skills, particularly around emerging vulnerabilities like prompt injection, according to O’Reilly. This highlights the need for...

ADT discloses second breach in 2 months, hacked via stolen credentials
2024-10-07 22:12

Home and small business security company ADT disclosed it suffered a breach after threat actors gained access to its systems using stolen credentials and exfiltrated employee account data. [...]

Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials
2024-10-01 06:32

More than 140,000 phishing websites have been found linked to a phishing-as-a-service (PhaaS) platform named Sniper Dz over the past year, indicating that it's being used by a large number of...

Reducing credential complexity with identity federation
2024-10-01 04:00

In this Help Net Security interview, Omer Cohen, Chief Security Officer at Descope, discusses the impact of identity federation on organizational security and user experience. He explains how this...

Hackers Exploit Default Credentials in FOUNDATION Software to Breach Construction Firms
2024-09-19 15:41

Threat actors have been observed targeting the construction sector by infiltrating the FOUNDATION Accounting Software, according to new findings from Huntress. "Attackers have been observed...

Cybercriminals Exploit HTTP Headers for Credential Theft via Large-Scale Phishing Attacks
2024-09-16 04:23

Cybersecurity researchers have warned of ongoing phishing campaigns that abuse refresh entries in HTTP headers to deliver spoofed email login pages that are designed to harvest users' credentials....