Do Son
Apache has issued an important security advisory warning that Apache Syncope, the widely used open-source identity management...
Latest news
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent nationwide alert warning that multiple cyber...
A newly disclosed critical vulnerability in the Sneeit Framework — a widely used WordPress plugin powering premium...
HashiCorp has released an important security advisory addressing a misconfiguration flaw in the Vault Terraform Provider that...
Critical Unpatched Flaw: Vivotek EOL IP Cameras Exposed to Unauthenticated RCE via Command Injection
Critical Unpatched Flaw: Vivotek EOL IP Cameras Exposed to Unauthenticated RCE via Command Injection
The Akamai Security Intelligence and Response Team (SIRT) has uncovered a previously undocumented — and still widely...
A newly disclosed vulnerability in R.V.R Elettronica’s TEX broadcast hardware has been assigned CVE-2025-63207, scoring 9.8 Critical...
Kaspersky Lab has published new findings revealing how the ToddyCat APT group has significantly upgraded its cyber-espionage...
A newly published investigation by the ENKI WhiteHat Threat Research Team reveals a rapidly expanding and increasingly...
A massive, fast-spreading phishing and malware operation is hitting Brazil, leveraging WhatsApp Web session hijacking, Python-based automation,...
Orange Cyberdefense’s CyberSOC and CSIRT teams have uncovered a new wave of Operation DreamJob attacks, revealing updated...
KnowBe4, a cybersecurity company, has unveiled an attempt to infiltrate its IT system through a fake employee from North Korea
the EMBAG law was passed and implemented. It now not only mandates the use of open-source software by the Swiss government or its contractors
CrowdStrike, a leading cybersecurity firm, has issued a warning about a new information-stealing malware dubbed "Connecio"
Google Chrome 127 brings a host of improvements, prominently featuring 24 security-related fixes, available for Windows, macOS, and Linux
the issue with CrowdStrike is not limited to the Windows operating system. As early as April this year, Linux users had been reporting kernel crash problems
CVE-2024-3246 allows attackers to inject malicious code into websites, potentially compromising sensitive data
Let's Encrypt has announced its intention to discontinue support for the Online Certificate Status Protocol (OCSP) in favor of CRLs
The vulnerabilities, identified as CVE-2012-4792 and CVE-2024-39891, pose significant risks to users and organizations
Docker has issued a security advisory for a critical vulnerability (CVE-2024-41110) affecting certain versions of Docker Engine.
CVE-2024-40075 is an XML External Entity flaw that could potentially allow attackers to execute arbitrary commands and access sensitive data
Esparza pleaded guilty in March, with charges filed in February. The FBI investigated the case as part of Operation PowerOFF
CVE-2024-6793 and CVE-2024-6794, carry the highest possible severity score of 9.8 on the Common Vulnerability Scoring System (CVSS).
Researchers found advertisements offering a specialized tool for bypassing security systems called AvNeutralizer
Experts have uncovered PyPI packages containing a malicious script in the "init.py" file that transmits user data to a Telegram bot
a 17-year-old youth from Walsall has been detained, suspected of belonging to the notorious cybercriminal group Scattered Spider
R0bl0ch0n TDS represents a sophisticated infrastructure comprising numerous domains and dedicated servers, securely protected by Cloudflare
The authorities' actions were carried out as part of Operation PowerOff, aimed at curbing the activities of DDoS-for-hire service
all 36 courts of the Superior Court of Los Angeles County were closed to restore systems following a ransomware attack
Oracle has agreed to pay $115 million to settle a two-year class-action lawsuit regarding the improper use of user data.
Wiz has now decided not to proceed with the acquisition by Google and will continue to operate independently
Google announced years ago that it would gradually phase out third-party cookies to prevent direct user tracking by advertising networks
CVSS rates the vulnerability associated with Project resources (CVE-2024-6806) as 9.8, highlighting its potential for severe impact