Patch/Configuration Management

Flaw in Ivanti endpoint manager software (EPM) could let an attacker with internal access execute a remote code execution (RCE).

Excel flaw tied to Chinese threat group UNC4841, while Chrome vulnerability is the eighth zero-day for the popular web browser of 2023.

Researchers discovered a flaw in the prolific ransomware gang’s encryption technique, allowing its victims to recover data to a certain extent.

The critical bug that could lead to a remote attack via voice call is one of 26 vulnerabilities affecting hundreds of Qualcomm chipsets.

Independent cybersecurity consultancy and research collective Security Research Labs has released a new free Black Basta ransomware decryption tool, according to BleepingComputer.

Security pros say threat actors leverage chaining to launch targeted attacks.

Less than a year after it re-emerged following earlier security issues, Microsoft has again taken action to limit malware distribution through its ms-appinstaller protocol for MSIX.

Threat actors have been targeting insecure Linux SSH servers with dictionary attack tools and port scanners in a bid to facilitate cryptocurrency mining and distributed denial-of-service attacks, The Hacker News reports.