No user interaction is required for takeover; GitLab CE and EE users should patch immediately.

Two vulnerabilities in Ivanti Connect Secure VPN devices can be chained together by a threat actor to craft malicious requests and execute arbitrary commands on the system.

The cybersecurity company, a Google subsidiary, said a 2FA policy change on X helped enable the “brute force” attack.

"In 2024, SaaS applications will present the next biggest attack surface that organizations have not yet addressed," says Adam Gavish, CEO and co-founder, DoControl.

Large mortgage company did not use the word “ransomware” in its 8K filing, but security experts say the evidence points to a likely ransomware attack.

French citizen was part of a gang that stole and sold hundreds of millions of records in 2020 and 2021 from over 60 companies.

Hijacked SEC account used to falsely announce Bitcoin ETF approval: everything you need to know.

Security pros noted that the first Patch Tuesday of 2024 was the second consecutive release by Microsoft with no zero-days.