Latest news
CVE-2024-31070, CVE-2024-36475, CVE-2024-36491, and CVE-2020-10188, range in severity with CVSS scores reaching 9.8 (Critical)
A newly identified cyberespionage group, dubbed TAG-100, has been linked to a series of sophisticated attacks
Cisco has issued an urgent security alert regarding a critical vulnerability (CVE-2024-20419) discovered in its Smart Software Manager (SSM)
A new threat actor, NullBulge, has emerged with a captivating narrative: hacktivists fighting against AI's encroachment on the art world
Cisco has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-20401) found in its Secure Email Gateway product
CISA has issued a critical warning, adding three actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog
SolarWinds has issued an urgent security advisory regarding multiple critical vulnerabilities discovered in its Access Rights Manager product
CVE-2024-37381 could have enabled authenticated attackers within the same network to execute arbitrary code on affected systems
GitLab is in discussions with investment bankers regarding a potential sale, attracting interest from industry peers like Datadog
Apache Airflow has released a security update to address a potentially severe code execution vulnerability (CVE-2024-39877)
CVE-2024-6457 leaves over 100,000 WooCommerce-powered online stores susceptible to unauthorized data breaches
CVE-2024-21687, and CVE-2024-21686 have the potential to compromise sensitive data and disrupt operations for organizations
A RCE vulnerability, tracked as CVE-2024-27348, is currently under active exploitation in the wild, targeting Apache HugeGraph-Server deployments
JPCERT/CC has released a comprehensive report detailing ongoing cyberattacks by the notorious MirrorFaceย LODEINFOย and NOOPDOOR malware
CVE-2024-6689 resides within the baramundi Management Agent (bMA) and could enable a local attacker to elevate their privileges
The Phylum Research Team recently uncovered a sophisticated cyberattack targeting developers using the npm package registry
Security researcher John Castro has uncovered a critical vulnerability (CVE-2024-6695) in Profile Builder, a widely used WordPress plugin
CybrX, who reported the CVE-2024-6345 vulnerability, has published a detailed technical analysis and proof-of-concept exploit code
A high-severity vulnerability in the Linux kernel has been found to affect a wide range of Moxa industrial networking and computing products
CosmicSting vulnerability identified as a severe threat to Adobe Commerce and Magento stores, is now actively being exploited in the wild
The Jellyfish Loader was discovered within a ZIP file initially uploaded from Poland. This file contained a Windows shortcut (.lnk)
CVE-2023-41916, CVE-2023-46801, and CVE-2023-49566, could allow attackers to read arbitrary files, execute remote code, and perform JNDI injection attacks