Do Son
Developers using the modern stack of Next.js and React are facing a “red alert” situation today. A...
A critical Remote Code Execution (RCE) vulnerability has been discovered in the Sneeit Framework, a core plugin...
The React Team has issued an emergency security advisory following the discovery of a catastrophic vulnerability affecting...
A massive, long-running cyber-espionage campaign has been discovered operating in plain sight within the official Chrome and...
A sophisticated C++ downloader known as Matanbuchus has resurfaced with a major technical overhaul, signaling a dangerous...
In a display of vulnerability chaining, security researcher Kiddo has released a detailed write-up demonstrating how three...
Water Saci Campaign Uses LLMs to Convert Malware to Python, Spreads Banking Trojan Via WhatsApp Worm
Water Saci Campaign Uses LLMs to Convert Malware to Python, Spreads Banking Trojan Via WhatsApp Worm
A sophisticated cyber-espionage campaign known as “Water Saci” has aggressively pivoted its tactics, leveraging artificial intelligence and...
Ideally, text editors are passive tools—you open a file, edit it, and save it. But a new...
AWS first unveiled its homegrown Nova series models at last year’s re:Invent, and has since continued expanding...
Following the release of its stable build in June, Google has now issued the second major update...
Stay informed about the latest social engineering tactics used by threat actors in cyberattacks. Learn how to protect your organization from deception and technical subterfuge.
Learn about the latest malvertising campaign attacking Google users. Find out how the scammers mimicked Google's services to trick victims.
Find out about APT42's phishing campaigns targeting high-profile individuals and organizations in the U.S. and Israel.
Uncover the Tusk cyber campaign targeting cryptocurrency theft and personal data. Don't fall victim to the cunning tactics of Russian-speaking cybercriminals.
Discover the enhanced security features of Windows 10/11 with device encryption. Learn how Microsoft is prioritizing security by enabling device encryption by default.
Discover the critical Windows vulnerability (CVE-2024-38213) and the Copy2Pwn attack that bypasses Mark-of-the-Web protections
Protect your system against WPS Office flaws. Find out how the critical security flaws identified as CVE-2024-7262 and CVE-2024-7263 could impact you.
Since much of our life is spent online, there are many ways for this to complicate your...
Explore the powerful updates to Windows Sandbox in Windows 11. Test potentially harmful software safely and securely in a virtualized space.
uBlock Origin and Lite are two distinct extensions, so even if Chrome disables uBlock Origin, it will not automatically upgrade to uBlock Origin Lite
Learn about the dangerous vulnerability present in Google Pixel devices that allows cybercriminals to execute code at the system level.
Uncover the deep connections between i-Soon and the Chinese security apparatus in the latest report from Germany’s Federal Office for the Protection of the Constitution (BfV).
Learn about the serious security flaw in Flatpak (CVE-2024-42472) and how it allows unauthorized access to files outside the sandbox.
Discover the vulnerability in Kubernetes' git-sync project that allows attackers to execute commands and steal sensitive data. Learn how to mitigate the risk
Learn about the advanced persistence and stealth techniques used by APT31 and APT27 in the EastWind cyberattacks targeting Russian organizations
In response to the active exploitation, CISA has added CVE-2024-28986 to its Known Exploited Vulnerabilities (KEV) catalog
Critical SQLi vulnerability in ZoneMinder (CVE-2024-43360). Learn how attackers can exploit it to gain unauthorized access and control systems
Learn about Last Mile Reassembly attacks and how they can bypass Secure Web Gateway systems, posing a threat to corporate networks.
These flaws, identified as CVE-2024-33533, CVE-2024-33535, and CVE-2024-33536, impact Zimbra Collaboration versions 9.0 and 10.0
Discover the power of cyber deception technologies in strengthening cybersecurity. Explore the NCSC's Active Cyber Defence 2.0 program and its impact.
Unlocking the iPhone's NFC chip: Apple's decision to open up NFC functionality to financial institutions in the EU and other regions.
Wei aims to minimize the risk of threat actors reverse-engineering the CVE-2024-38063 exploit, buying time for organizations to secure systems