Two Russian APT groups are exploiting a WinRAR flaw patched nearly a year ago to hit Ukraine

Two Russian state-linked hacking groups are actively exploiting a path traversal vulnerability in WinRAR that was patched nearly a year ago, using it to deploy credential-stealing malware against Ukra [...]

Still using WinRAR? You should probably look out for these potentially dangerous security flaws

A high severity flaw in WinRAR allows crooks to execute malware remotely. [...]

WinRAR has a serious security flaw - worrying zero-day issue lets hackers plant malware, so patch right away

Older versions of WinRAR were carrying a major vulnerability which was being exploited in the wild. [...]

Still using WinRAR? It has a worrying security flaw that could let hackers hijack your Windows device

WinRAR patch was recently released addressing the medium-severity vulnerability. [...]

Firefox finally adds tab groups

Firefox now lets you organize your tabs. Four years after its biggest rivals launched tab groups, Mozilla published a nearly 1,000-word blog post recounting the feature's long road from user requ [...]

Amazon Music's Fan Groups are a refreshingly old-school way to share and find tunes

Amazon is in the middle of rolling out Alexa+, the long-awaited, AI-infused update for its voice assistant. At the same time, the company has also been giving a fair bit of attention to Amazon Music, [...]

Claude Mythos exposed a hard truth: Your enterprise patching process is way too slow

In 2024, researchers from the University of Illinois found that GPT-4, when provided with a common vulnerabilities and exposures (CVE) description, could autonomously exploit 87% of a curated 15-vulne [...]

Dangerous new malware exploits WinRAR flaw - here's what we know

A Chinese state-sponsored actor was seen exploiting a WinRAR bug, soon after the Russians. [...]

CVSS scored these two Palo Alto CVEs as manageable. Chained, they gave attackers root access to 13,000 devices.

During Operation Lunar Peek in November 2024, attackers gained unauthenticated remote admin access — and eventual root — across more than 13,000 exposed Palo Alto Networks management interfaces. P [...]