Learn about the critical heap-based buffer overflow vulnerability (CVE-2024-49775) in Siemens User Management Component (UMC) and its potential impact on industrial and enterprise environments.
Discover cShell, a new strain of DDoS malware targeting poorly managed Linux SSH servers. Learn how it exploits weak credentials to turn servers into DDoS bots.
Discover the espionage operations of Earth Koshchei, a threat group behind a large-scale remote desktop protocol (RDP) campaign.
Discover the world of hacktivist groups and their impact on geopolitics. Explore the tactics, players, and implications of state-linked hacktivism.
Learn about the new CVE-2023-48788 exploit targeting Fortinet FortiClient EMS and how to protect your network from unauthorized code execution.
Critical vulnerabilities in Fortinet products - FortiClient VPN, FortiManager, and FortiWLM. Stay safe from CVE-2023-34990 with the latest updates.
Find out about the Next.js vulnerability CVE-2024-51479 that could have exposed sensitive data. Take necessary measures to secure your Next.js application.
Stay informed about the rise of VIPKeyLogger, a dangerous infostealer malware that poses significant risks to individuals and organizations.
Uncover a potential privilege escalation method in Azure Key Vault and learn how attackers could exploit role misconfigurations to access sensitive data.
Discover the severity of the CVE-2024-10205 flaw affecting Hitachi Vantara's Infrastructure Analytics Advisor and Ops Center Analyzer.
Uncover the dangers of the Mamont Android banking Trojan. Protect yourself from malicious parcel tracking apps and photo identification scams.
Protect your organization from critical command injection vulnerability CVE-2024-12356 in BeyondTrust’s Privileged Remote Access and Remote Support solutions.
The BADBOX botnet is making a comeback with a vengeance. Discover the alarming details about its resurgence and growing sophistication.
Discover the vulnerabilities in Azure Data Factory's integration with Apache Airflow. Learn how attackers can achieve shadow administrator control and remote code execution.
Take action to secure your system. Find out how Google's latest Chrome update addresses CVE-2024-12692 and other security vulnerabilities.
Unveiling the Lumma infostealer malware: How a malvertising campaign uses fake CAPTCHA prompts to spread this dangerous threat.
Discover RiseLoader, a new malware family focused on efficient payload delivery. Get insights into its origins, similarities with RisePro, and advanced anti-analysis measures.
Learn about Nova, a dangerous variant of the Snake Keylogger family. Discover its advanced techniques and how it evades detection in cybersecurity.
Stay protected from Apache Tomcat vulnerabilities. Learn about CVE-2024-50379 and CVE-2024-54677 and the security updates to address these flaws.
New security flaw (CVE-2024-53376) discovered in CyberPanel: understand the risks and potential server compromises. Check your version and take action.
Learn about the I2PRAT malware campaign, a sophisticated threat that leverages the Invisible Internet Project (I2P) to hide its activities and evade detection.
Learn about the critical vulnerability (CVE-2024-55949) in MinIO object storage platform that allows privilege escalation and poses a significant risk to data security.