Suspected Russian nation-state threat groups have duped multiple victims into granting potentially persistent access to networks via authentication requests and valid tokens.

The Chinese nation-state threat group intruded five additional telecom networks between December and January, including two unnamed providers in the U.S., Recorded Future researchers said.

A subgroup of Seashell Blizzard exploited public vulnerabilities in internet-facing systems, Microsoft researchers said.

The Common Vulnerability Scoring System has a lot of critics, but experts say it’s still the best unified way to share the severity of cybersecurity flaws.

Research released Tuesday by watchTowr shows how easy an old storage bucket can be repurposed by malicious attackers.

The Vietnam-based group has grown more sophisticated since 2013, new research shows.

The agency’s Red-C program seeks to build new defenses into bus-based computer systems. 

The flaw in Lightning.AI’s platform, which has been patched, would have given root access to an attacker and broad control over a victim’s cloud-based studio and connected…

A company’s licensing change to a static analysis tool has forced 10 companies together to create Opengrep.

The vulnerability, described by a researcher as “bad programming,” allows an attacker to send unlimited connection requests through ChatGPT’s API.