Malware leverages a legitimate – but outdated – Avast kernel driver, which lets it evade defenses and wreak havoc on systems.

The US Federal Communications Commission (FCC) proposed a $734,872 penalty against a smart doorbell manufacturer that was anything but

The packages were installed more than 1,700 times each prior to their removal from the repository.

Shadowserver reports 2,000 firewalls were hacked just two days after CISA put the two PAN-OS bugs on the KEV catalog.

LLM capabilities boosted OSS-Fuzz’s coverage and helped find a 20-year-old flaw in OpenSSL.

SentinelLabs reveals information on four previously unreported Chinese front companies taken down by the U.S. government Oct. 10.

The five vulnerabilities could lead to local privilege escalation without user interaction.

Women are increasingly taking on top roles within Russian-speaking threat actor groups.

China’s campaign against U.S. telecoms has been ongoing for years.

Identity protection in healthcare was a dominant theme at last week’s Semperis HIP conference, with many participants offering guidance on how to improve medical cybersecurity.