CISA has added a Palo Alto Networks Expedition flaw tracked as CVE-2024-5910 to its Known Exploited Vulnerabilities Catalog.

North Korean cryptocurrency thieves caught targeting macOS with fake PDF applications, backdoors and new persistence tactics.

HPE this week warned of two critical vulnerabilities in Aruba Networking access points that could lead to unauthenticated command injection.

A critical vulnerability in Cisco Unified Industrial Wireless software could allow remote attackers to inject commands with root privileges.

Impersonating legitimate software such as Foxit PDF Editor and AutoCAD, the SteelFox crimeware bundle steals user information.

Embed Security has raised $6 million in an early stage funding round led by venture capital firm Paladin Capital Group.

Essential steps such as security awareness training, MFA, and Zero Trust identity management help organizations reduce the human element risk.