Stay protected from the Operation Code on Toast campaign. Find out about the new zero-day vulnerability CVE-2024-38178 in Microsoft IE and the targeted attack.
Discover the latest Kubernetes security flaws: CVE-2024-9486 & CVE-2024-9594. Learn how attackers could gain root access to VMs
New technique discovered to bypass the 'noexec' flag in Linux systems, potentially allowing execution of malicious code.
Uncover the dangers of command-jacking in supply chain attacks. Learn how attackers exploit CLI tools to execute malicious code.
Get insights into the SideWinder APT group's tactics and techniques. Learn about their global expansion and technical expertise in cyber espionage.
Be aware of the PHP Object Injection flaw (CVE-2024-9634) in GiveWP plugin. Protect your website and donor data from potential exploitation.
Stay informed about the latest cyber threat, ErrorFather. Read how this dangerous campaign utilizes the Cerberus Android Banking Trojan to target Android users.
Discover the security vulnerabilities in Rittal's IoT Interface and CMC III Processing Unit. Learn how attackers can exploit CVE-2024-47943 to gain unauthorized access.
Discover the truth about end-to-end (E2EE) encryption in cloud storage. A report uncovers vulnerabilities in major providers, putting users at risk
Critical Vulnerabilities Found in mbNET.mini Industrial Routers Could Allow for Full System Takeover
Stay informed about the mbNET.mini industrial router vulnerabilities. Learn how these critical security flaws can lead to remote code execution and unauthorized access.
Protect yourself from RTF phishing attacks. Learn about the dangers of these deceptive attacks and how to stay safe online.
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about three actively exploited security vulnerabilities
Learn about the PipeMagic backdoor campaign targeting Saudi Arabia, using a deceptive ChatGPT application as the initial infection vector.
Learn about the critical vulnerabilities in Helmholz REX100 industrial routers and how they could potentially expose your organization to unauthorized access and remote code execution.
Learn about EDRSilencer, a dangerous tool used by cybercriminals to evade detection and disrupt endpoint detection and response (EDR) systems.
Learn about the FIDO Alliance's efforts to standardize the secure exchange of credentials. Explore the new Credential Exchange Protocol and Credential Exchange Format.
Based on Angelboy's analysis, security researcher Varwara has released a PoC exploit code to demonstrate the CVE-2024-35250's impact
Learn about the vulnerability CVE-2024-9312 in Authd and the potential risks it poses to user IDs and unauthorized access on Ubuntu machines.
Discover the rise of cyberattacks by Earth Simnavaz. Find out how this Iranian-linked group targets the energy sector in the Gulf region.
Learn about the recent Jetpack vulnerability and the urgent need to update. Safeguard your website from potential security risks today.
Game Freak confirms server breach, resulting in leaks of confidential information and internal materials related to the Pokémon franchise.
Stay up-to-date on the latest security updates for Splunk Enterprise and Splunk Cloud Platform. Learn about the vulnerabilities and their potential impact.