Learn about the sophisticated LemonDuck malware that exploits the EternalBlue vulnerability to mine cryptocurrency undetected.
Uncover the hidden dangers of DNS tunneling attacks and learn how cyber criminals use this technique to steal sensitive data.
Discover Mamba 2FA, an adversary-in-the-middle phishing kit that can bypass non-phishing-resistant MFA methods.
Stay protected from critical vulnerabilities with Qualcomm's October 2024 Security Bulletin. Learn about CVE-2024-43047 and other risks to your device's security.
Stay secure with the latest update for Cacti. Version 1.2.28 addresses critical vulnerabilities, including CVE-2024-43363, a Remote Code Execution flaw.
Introducing CSP Bypass, the open-source tool for ethical hackers and security researchers to identify and bypass Content Security Policies (CSPs) and exploit XSS vulnerabilities.
With the rise of cyberattacks, understanding GitHub security is more important than ever. Learn how to protect your repositories from vulnerabilities. Stay informed to safeguard your projects and data.
Stay informed about the latest critical vulnerabilities affecting MediaTek chipsets in smartphones, tablets, and IoT devices.
Stay informed about the latest security vulnerabilities impacting Cisco Small Business VPN Routers. Learn about CVE-2024-20393 and CVE-2024-20470.
Protect your systems from critical flaws in Redis. Learn about the dangerous CVE-2024-31449 and what you need to do to safeguard your data.
Stay informed about the latest security vulnerability, CVE-2024-47191, in the OATH-Toolkit's PAM module for OTP authentication.
For security professionals and researchers interested in replicating the PoC exploit for CVE-2024-44193, mbog14 has provided documentation
Beware of Zoom phishing attacks! Learn about a sophisticated campaign targeting unsuspecting users and compromising their Microsoft accounts.
Learn about the command injection vulnerability in Zimbra Collaboration platform and the urgent need for patching. Stay protected from active exploitation attempts.
Learn about CyberVolk, a politically motivated hacktivist group that has transitioned to using ransomware as their primary attack tool.
Uncover the stealthy SHROUDED#SLEEP malware campaign attributed to North Korea's APT37. Learn how this operation targeting Southeast Asia remains undetected for extended periods.
Understand the impact of the CVE-2024-45409 vulnerability that allows bypassing SAML authentication and gaining unauthorized access.
Explore the rise of BabyLockerKZ, a variant of MedusaLocker ransomware, as it expands its reach and targets organizations across continents.
Unforeseen consequences of an AI assistant: a CEO's story. Read about the mishap that led to unexpected actions and alterations to computer settings.
Discover Venator, a powerful and flexible threat detection platform that leverages Kubernetes to effectively identify and respond to evolving attack vectors.
Uncover the latest attacks on MS-SQL servers using the GotoHTTP remote administration tool. Learn how cybercriminals exploit unsecured accounts and weak passwords.
Red Barrels, the studio behind the Outlast horror game series, announces cybersecurity breach and data compromise.