A significant security update rolled out by Microsoft with the Windows 11 24H2 (KB5063878) release is causing widespread issues for users, with reports surfacing that the update can render SSDs and HDDs inaccessible and may potentially corrupt user data.

Human resources giant Workday has disclosed a data breach after attackers gained access to a third-party customer relationship management (CRM) platform in a recent social engineering attack.

A cybersecurity researcher has discovered that hundreds of publicly accessible TeslaMate installations are exposing sensitive Tesla vehicle data without authentication, revealing GPS coordinates, charging patterns, and personal driving habits to anyone on…

با توجه به احتمال حذف شیار سیم‌کارت فیزیکی در برخی مدل‌های آیفون ۱۷، وزارت ارتباطات و فناوری اطلاعات اعلام کرد که موضوع راه‌اندازی سیم‌کارت‌های الکترونیکی (eSIM) در کشور را به‌طور جدی پیگیری می‌کند تا نگرانی کاربران ایرانی برطرف شود.

Workday, a leading provider of enterprise cloud applications for finance and human resources, has confirmed it was the target of a sophisticated social engineering campaign that resulted in a data breach via a third-party Customer Relationship Management…

Cisco Talos discovered UAT-7237, a Chinese-speaking advanced persistent threat (APT) group active since at least 2022, which has significant overlaps with UAT-5918.

We examine the evolution of the PipeMagic backdoor and the TTPs of its operators – from the RansomExx incident in 2022 to attacks in Brazil and the Middle East, and the exploitation of CVE-2025-29824 in 2025.

Chinese APT UAT-7237 has been targeting Taiwanese web infrastructure for long-term access to high-value entities.

سریال آسیب‌پذیری‌های بحرانی سیسکو ادامه دارد و این بار نرم‌افزار مدیریتی FMC با آسیب‌پذیری با امتیاز کامل ۱۰، تهدیدی جدی برای شبکه‌های سازمانی به شمار می‌رود.

A critical security vulnerability has been discovered in Rockwell Automation's ControlLogix Ethernet communication modules, potentially allowing remote attackers to execute arbitrary code on industrial control systems. 

The US has indicted Zeppelin ransomware operator Ianis Antropenko, seizing over $2.8 million in cryptocurrency from his wallet.

BigAnt Office Messenger 5.6.06 - SQL Injection. CVE-2024-54761 . webapps exploit for Multiple platform

Workday appears to have joined the list of major companies that had their Salesforce instances targeted by hackers. 

Researchers have managed to eavesdrop on cell phone voice conversations by using radar to detect vibrations. It’s more a proof of concept than anything else. The radar detector is only ten feet away, the setup is stylized, and accuracy is poor. But it’s a…

سازمان نظام صنفی رایانه‌ای استان تهران دومین بیانیه خود را درباره شفاف‌سازی پیرامون اخبار منتشر شده در خصوص یکی از اعضای هیئت‌مدیره منتشر کرد.

Soosyze CMS 2.0 - Brute Force Login. CVE-2025-52392 . webapps exploit for Multiple platform

The vast majority of companies are using more than one cloud platform, yet struggle to establish and monitor security across different environments giving attackers an opening.