Trend Micro, a leader in cybersecurity solutions, has issued a security update to its Maximum Security software for Windows users, addressing a significant local privilege escalation vulnerability identified as CVE-2024-32849. The flaw, which carries...
Veeam, a major provider of backup and data protection solutions, has issued a security advisory warning of remote code execution (RCE) vulnerability in its Service Provider Console (VSPC). This flaw (CVE-2024-29212) opens a door...
Security researchers at Juniper Threat Labs have uncovered a dangerous escalation in attacks targeting Ivanti Connect Secure (ICS) and Ivanti Policy Secure Gateways. Attackers are weaponizing two critical vulnerabilities, CVE-2023-46805 (authentication bypass) and CVE-2024-21887...
Security researchers at FortiGuard Labs have uncovered a dangerous new trend: hackers are weaponizing Minecraft source packs to distribute a notorious password-stealing malware called zEus. This disguised attack highlights the risks of downloading content...
A significant security flaw has been identified in PDF.js, a widely-used, Mozilla-supported PDF viewer developed with HTML5, and React-PDF, a popular npm package for displaying PDFs within React applications. This vulnerability, which allows for...
Security researchers at Kandji have found a dangerous new strain of macOS malware. Dubbed “Cuckoo,” this nasty piece of code combines the worst aspects of spyware and info-stealers, designed to pilfer sensitive data and...
Researchers at the MITRE Corporation have unveiled disturbing details of a cyberattack attributed to a Chinese state-sponsored hacking group. The attack, first detected in December 2023, exploited zero-day vulnerabilities in Ivanti Connect Secure to...
Protecting private information and personal data has become a preference in today’s digital world. Cybersecurity has become more compulsory than it ever was. A random click on the Internet may lead to a URL...
The technical details and proof-of-concept (PoC) code are now available for a high-severity vulnerability (CVE-2024-21006) in the Oracle WebLogic Server that allows remote attackers to compromise the Oracle WebLogic Server. With a CVSS score...
A security vulnerability has been discovered in Yoast SEO, the most popular search engine optimization plugin for WordPress, affecting over 5 million active installations worldwide. Identified as CVE-2024-4041 with a Common Vulnerability Scoring System...
The very backbone of Virtual Private Networks (VPNs), praised for their ability to secure online activities, is under scrutiny following a breakthrough discovery by Dani Cronce and Lizzie Moratti from Leviathan Security Group. Their...
Security researchers at Zscaler’s ThreatLabz have uncovered significant updates to the HijackLoader malware, making it far more stealthy and dangerous. These new capabilities are designed to evade detection by antivirus and security software, allowing...
A bespoke backdoor known as Kapeka (also dubbed KnuckleTouch) has been spotlighted for its sophisticated capabilities and implications in geopolitical cyber conflicts. First detected in mid-2022 and formally tracked by 2024, Kapeka’s emergence aligns...
Trend Micro, a leading provider of cybersecurity solutions, has released an important update for its Antivirus One software, targeting a critical vulnerability that could have allowed attackers to inject malicious code. The issue tracked...
QCSuper QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G (and for certain models 5G) radio frames, among other things. It will allow you to generate PCAP captures of it using either...
Secure Your Connection
