Threat actors are using public exploits for a critical authentication bypass flaw in ProjectSend to upload webshells and gain remote access to servers. The flaw, tracked as CVE-2024-11680, is a ...

Cybersecurity has become crowded with dashboards, alerts, scanners, and artificial intelligence features. Yet the basic job has not changed much. Security teams still need to know what is running, ...

Hackers working on the open-source Metasploit project have spiffed up a zero-day attack on Microsoft’s Internet Explorer, making it more reliable — and more likely to be used by criminals. Security ...