Cybersecurity

Attackers are using social engineering to get users to copy, paste, and run malicious scripts — all while thinking they are helping out the IT team.

A newly discovered vulnerability in Phoenix SecureCore UEFI firmware tracked as CVE-2024-0762 impacts devices running numerous Intel CPUs, with Lenovo already releasing new firmware updates to resolve the flaw.

A vulnerability dubbed "CosmicSting" impacting Adobe Commerce and Magento websites remains largely unpatched nine days after the security update has been made available, leaving millions of sites open to catastrophic attacks.

A researcher has found a way to impersonate Microsoft corporate email accounts, which could make phishing attacks harder to spot.