Please turn on your JavaScript for this page to function normally.
Spring4Shell: No need to panic, but mitigations are advised
Security teams around the world got another shock on Thursday when news of disclosure of a PoC for an unauthenticated RCE zero-day vulnerability in Spring Core, a massively …
Critical RCE 0day in Apache Log4j library exploited in the wild (CVE-2021-44228)
A critical zero-day vulnerability in Apache Log4j (CVE-2021-44228), a widely used Java logging library, is being leveraged by attackers in the wild – for now, …
Featured news
Resources
Don't miss
- Tailscale fixes SSH flaws allowing lateral movement within tailnets
- Data breach at Sony-owned internet provider compromises 2.6 million customer records
- Bellini Capital CISO on AI security governance and the limits of patching faster
- AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records
- Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack