Former Mesa County Clerk Tina Peters was convicted for her role in a significant election security breach that exposed sensitive voting system data. Despite facing legal consequences, Peters maintains her defiance and announces plans to continue fighting the charges. The case highlights critical vul
Threat actors have registered over 5,000 malicious domains impersonating official election websites to target voters with phishing attacks. These domains exploit voter concerns about registration, ballot tracking, and election information to steal credentials, financial data, and personally identifi
A sophisticated supply chain attack dubbed “Miasma” has compromised multiple Red Hat-associated npm packages, injecting malicious code designed to steal credentials and propagate as a worm. The attack targeted the npm ecosystem, affecting downstream applications that depend on these packages. Organi
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Oracle WebLogic Server deserialization vulnerability (CVE-2020-14882) to its Known Exploited Vulnerabilities (KEV) catalog. This remote code execution flaw, originally patched in October 2020, is now being actively
A critical privilege escalation vulnerability in the Linux kernel’s CIFS (Common Internet File System) implementation has been discovered after hiding in plain sight for 19 years. Dubbed “CIFSwitch,” the flaw allows unprivileged users to gain root access through a race condition in filesystem switch
The U.S. Department of Defense has officially acknowledged that commercially available location data from smartphones and connected devices poses a significant operational security risk to military personnel and missions. This admission validates long-standing concerns about how adversaries can expl
A sophisticated campaign is targeting Signal messenger users by stealing their encrypted backup files and attempting to crack the passphrases offline. Attackers are using social engineering, malware distribution, and cloud storage compromise to access Signal backups stored on victims’ devices or clo
CrowdStrike has announced a strategic partnership with NVIDIA to scale AI-native agents across its Falcon Exposure Management platform. This collaboration leverages NVIDIA’s AI computing infrastructure to enhance autonomous threat detection, vulnerability prioritization, and risk assessment capabili