Do Son
The maintainers of Apache StreamPark, a popular framework for developing streaming applications, have issued a critical security...
Latest news
A notorious initial access broker (IAB) known as “Storm-0249” has radically shifted its tactics, moving from broad...
A high-severity vulnerability has been uncovered in ImageMagick, the ubiquitous open-source image processing suite used by millions...
A sophisticated malware campaign has been uncovered within the Visual Studio Code (VS Code) Marketplace, exposing a...
React2Shell: Max-Score RCE (CVSS 10.0) Triggers Widespread Exploitation by Espionage Groups & Miners
React2Shell: Max-Score RCE (CVSS 10.0) Triggers Widespread Exploitation by Espionage Groups & Miners
The cybersecurity landscape was jolted this month by the disclosure of a catastrophic vulnerability in one of...
Linux Kernel io_uring UAF Flaw Used to Cheat BPF Verifier and Achieve Container Escape, PoC Releases
Linux Kernel io_uring UAF Flaw Used to Cheat BPF Verifier and Achieve Container Escape, PoC Releases
Two security researchers, known by the handles st424204 and d4em0n, have published a deep-dive analysis of a...
The maintainers of Apache Airflow, the industry-standard platform for programmatic workflow authoring, have released a crucial security...
Apple has issued an urgent security intervention for iPhone and iPad users, releasing patches for two critical...
cybernewswire
Torrance, United States / California, 12th December 2025, CyberNewsWire
On the very same day it announced its historic partnership with Disney, OpenAI finally unveiled the model...
PAN-OS Vulnerabilities: Command Injection (CVE-2024-8686) and GlobalProtect Exposure (CVE-2024-8687)
PAN-OS Vulnerabilities: Command Injection (CVE-2024-8686) and GlobalProtect Exposure (CVE-2024-8687)
Protect your organization from critical vulnerabilities in Palo Alto Networks products. Learn more about CVE-2024-8686 and CVE-2024-8687.
Discover the alarming trends in cryptocurrency fraud. Learn about the growing threat of investment scams and the billions of dollars lost in 2023.
Discover the alarming rise of Scattered Spider's ransomware attacks on cloud infrastructures. Find out how they exploit cloud-native tools and manipulate MFA settings.
Stay informed about the sophisticated VMConnect cyber campaign targeting developers. Discover the tactics used by North Korea's Lazarus Group.
In the ever-evolving digital landscape, the data backup is very important. From accidental deletions and hardware failures...
Learn about the rise of Repellent Scorpius, a ransomware group employing the Cicada3301 ransomware and a multi-extortion model.
Discover the severity of CVE-2024-43491, a critical zero-day vulnerability in Windows Update. Learn how it can lead to remote code execution and system compromise.
Discover the details of CVE-2024-38217 (LNK stomping), a zero-day vulnerability affecting Microsoft Defender. See how hackers exploit this flaw to bypass security safeguards.
Discover the security risks associated with the Autel MaxiCharger: researchers demonstrate how it can be remotely compromised.
Discover the potential consequences of CVE-2024-45032, a critical vulnerability in Siemens' Industrial Edge Management platform.
Stay protected from the critical security vulnerability CVE-2024-45411 in Twig template engine. Learn how to safeguard your web applications.
Critical security vulnerability (CVE-2024-6596) in Endress+Hauser products. Learn about the risk, impacts, and steps to protect your systems.
ASEC reveals the increasing sophistication of cybercriminals distributing XMRig malware through Binary Managed Object Files. Stay informed about this threat.
Learn about the crucial Microsoft Patch Tuesday September updates. Protect your systems from 79 vulnerabilities, including zero-day exploits.
Protect your HPE HP-UX systems from a critical vulnerability (CVE-2024-42500) that could lead to DoS attacks. Take action now to safeguard your organization's data.
Discover the evolving tactics of Earth Preta, a notorious cyber espionage group, and their heightened threat to government entities in the APAC region.
SPIP CMS at risk! Read about CVE-2024-8517, a critical security vulnerability that enables unauthenticated attackers to take control of affected servers.
Discover the evolving techniques and growing threat of the Quad7 botnet. Learn about their new tools and tactics aimed at evading detection and expanding their reach.
Stay protected with Ivanti Endpoint Manager (EPM) updates. Address critical vulnerabilities like CVE-2024-29847 to secure your organization's endpoints.
Discover the critical vulnerability CVE-2024-33698 in Siemens' User Management Component (UMC) and its potential impact on industrial control systems.
Enhance collaboration and engagement with NGINX's migration of its open-source development repository to GitHub.
Urgent warning from CISA: Actively exploited vulnerabilities in ImageMagick, Linux Kernel, and SonicWall. Learn how to safeguard against potential cyberattacks.