CVE-2022-31678 allows a remote attacker to obtain sensitive information, caused by improper handling of XML external entity declarations
Do Son
Researchers investigated and analyzed the data samples posted on the forum, and speculated that the leaked database contains actual company data of Beeline
CVE-2023-26463 vulnerability can allow an attacker to bypass authentication and potentially execute remote code on your system.
CVE-2023-0656 allows a remote unauthenticated attacker to cause DoS by exploiting a stack-based buffer overflow vulnerability
Recently, there was a serious data breach incident involving the well-known password management software, LastPass
Apple has now released the first Rapid Security Response update for iOS 16.4 (a) to testers, which is likely only for testing purposes
CVE-2023-20078 in the web-based management interface of Cisco IP Phone allow attackers to execute arbitrary commands with root privileges
The U.S. Marshals Service (USMS) announced that it is investigating a major security breach that resulted in the leak of sensitive information
An attacker could exploit CVE-2023-1017 to execute arbitrary code in the TPM context or crash the TPM chip/process or rendering it unusable.
Tracked as CVE-2023-27320, the flaw exists in sudo's per-command chroot feature, which allows users to specify an alternate root directory
According to theregister, Telus is currently investigating a data breach incident involving employee information and source code.
Hackers released pirated Final Cut Pro software that carries the XMRig mining program, which specifically uses Mac users to mine Monero coins
hackers used a phishing attack to obtain a verification code from an Activision employee, gaining access to their Slack account
Most critical flaw affecting ZoneMinder tracked as CVE-2023-26035 (CVSS score: 10), stems from an insufficient validation of permissions check
various Android malware families are mimicking icon & name of ChatGPT to mislead unsuspecting users, making them believe it is a genuine app
The Amsterdam cyber crime police in the Netherlands recently announced the arrest of three criminals involved in ransomware activities
Apache Airflow has published a security advisory to warn users about multiple vulnerabilities affecting many of its packages.
CVE-2023-22920 could allow a remote attacker to gain unauthorized access to the system, caused by a factory-default misconfiguration