Eclypsium researchers expose critical vulnerabilities in Palo Alto Networks firewalls, including the BootHole vulnerability. Stay informed and protect your systems.
Discover the critical vulnerability in Subaru STARLINK connected vehicle service that allows remote tracking and control of vehicles.
Stay informed about the critical vulnerability CVE-2024-50050 in Meta's Llama-Stack. Learn how this flaw can lead to arbitrary code execution and severe risks to AI model hosting and system security.
Discover the latest threat in the ransomware landscape: HellCat ransomware. Learn about its origins, targets, and collaboration with Morpheus.
Apache Wicket vulnerability alert: CVE-2024-53299. Understand the risk and learn how to secure your web applications against memory leaks.
Discover BackConnect, the new strain of QBot malware that has resurfaced with enhanced capabilities. Learn how it adapts and what it means for cybersecurity.
The U.S. Department of Justice announces indictment of individuals involved in a laptop farm scheme aimed at tricking U.S. businesses and evading sanctions.
Discover the latest evasion tactic used by cybercriminals: the ChaCha20 cipher in Lumma Stealer malware. Stay informed and protected against evolving threats.
Protect your WordPress site from critical security vulnerabilities in the Real Homes theme and Easy Real Estate plugin. Learn how to secure your site from CVE-2024-32444 & CVE-2024-32555.
Protect your Android device and personal data with Google's new Identity Check feature. Learn how it adds an extra layer of security to your critical account settings.
Discover the technical details and PoC of CVE-2024-43468, a critical vulnerability in Microsoft Configuration Manager. Learn how attackers can exploit SQL injection vulnerabilities.
Learn about the potential risks of the CVE-2025-21535 vulnerability in WebLogic Server. Stay protected from unauthenticated remote attacks that could exploit this critical flaw.
Beware of a malicious VS Code extension impersonating the Zoom Workspace tool. Learn how this deceptive extension targets software developers and steals sensitive data.
Take action to secure your Elastic Agent policies. Discover how the high severity vulnerability CVE-2024-43707 could compromise sensitive information in Kibana.
Discover the latest trends in credential harvesting and how attackers are targeting a wider range of cloud applications beyond well-known platforms.
Uncover the alarming Android malware campaign attributed to the Indian APT group DONOT. Learn how this group targets individuals and organizations for strategic intelligence collection.
Stay informed about the latest payment fraud trends and threats. Learn about the increase in Magecart e-skimmer infections and check fraud in our comprehensive report.
Learn about the recent XSS vulnerabilities in phpMyAdmin and how the latest release version 5.2.2 provides patches to address these security risks.
Unveiling Murdoc Botnet: A new variant of Mirai malware targeting AVTECH cameras and Huawei HG532 routers. Learn about the evolving tactics and sophistication of this expansive botnet campaign.
Stay informed about the latest tactics used in ESXi ransomware attacks. Learn how attackers exploit virtualized infrastructure components to disrupt operations.
Sophos X-Ops uncovers ransomware campaigns STAC5143 and STAC5777 targeting Microsoft Office 365 and Teams. Learn how these campaigns exploit email bombing and vishing techniques.