Do Son Crucial security advisory: The Pylons Project addresses CVE-2024-49768, a serious vulnerability in Waitress WSGI server.
Stay informed about the recent lottie-player supply chain attack. Learn how malicious actors targeted the JavaScript library and the potential risks involved.
Discover Operation Magnus, the collaborative effort to dismantle RedLine and META, infostealers targeting millions of computers worldwide.
Urgent update required for AI Power: Complete AI Pack plugin. Patch critical vulnerability CVE-2024-10392 to prevent complete site takeover.
Critical security flaw in Apache Lucene.NET (CVE-2024-43383). Update now to prevent remote code execution and potential data breaches.
Discover what's new in BackBox Linux 9: improved performance, enhanced stability, and a refreshed desktop environment for ethical hackers.
Uncover the critical security vulnerability in qBittorrent that went unnoticed for over 14 years, leaving users exposed to cyberattacks.
ServiceNow, a leading cloud-based enterprise platform, has recently addressed two significant flaws, CVE-2024-8923 and CVE-2024-8924
Discover the CVE-2024-48074 flaw in DrayTek Vigor2960 routers and learn how it can lead to remote code execution and complete device takeover
Learn about the investigation into a Naver phishing campaign suspected to be linked to North Korean threat actors and Apple domain spoofing.
Discover the critical security flaw in LiteSpeed Cache plugin for WordPress. Learn about CVE-2024-50550 and how it can compromise your site's security
Discover the critical vulnerabilities in Google Cloud's default service accounts and learn how to secure your cloud environments.
Learn about Interlock, a new ransomware group targeting both Windows and FreeBSD operating systems, and the concerning trend it represents.
Discover a novel persistence technique that exploits TypeLib libraries in the COM system for stealthy, persistent code execution on Windows.
Uncover the sophisticated cyberespionage toolset CloudScout used by the APT group Evasive Panda to infiltrate networks and exfiltrate data from popular cloud services.
Discover the risks of Microsoft Entra ID's cross-tenant synchronization feature and how threat actors are using it for lateral movement attacks.
Enhance email security with Inbound SMTP DANE and DNSSEC. Learn how Microsoft's Exchange Online protects against sophisticated cyberattacks.
Discover the details of a thrilling exploit at Pwn2Own Ireland 2024. Learn about the CVE-2024-50387 vulnerability and how it allowed hackers to gain control of a QNAP TS-464 NAS device.
QNAP swiftly addresses critical zero-day CVE-2024-50388 flaw in HBS 3 Hybrid Backup Sync software, preventing potential security breaches.
Learn about the recently disclosed Atlassian Confluence vulnerability and how attackers exploit it to hijack victim resources and conduct cryptomining activity on compromised systems.
PSAUX Ransomware is Exploiting Two Max Severity Flaws (CVE-2024-51567, CVE-2024-51568) in CyberPanel
PSAUX Ransomware is Exploiting Two Max Severity Flaws (CVE-2024-51567, CVE-2024-51568) in CyberPanel
Threat actors are leveraging CVE-2024-51567, CVE-2024-51568, and CVE-2024-51378, to compromise servers and deploy PSAUX ransomware
Discover the newest Microsoft Windows zero-day vulnerability that allows attackers to leak user credentials. Learn how to mitigate the risk.