Do Son
HelixGuard researchers have uncovered a malicious Python package uploaded to PyPI that impersonates the widely used “pyspellchecker”...
Latest news
A critical vulnerability (CVE-2025-65108) has been disclosed in the widely used Markdown to PDF npm package, a...
Trustwave SpiderLabs researchers have identified a new and rapidly evolving banking Trojan—dubbed Eternidade Stealer—that hijacks WhatsApp, steals...
Researchers at K7 Labs have discovered a highly obfuscated Python-based malware using multi-layer encoding, disguised archive formats,...
After announcing last month that it would begin “reallocating” long-dormant usernames, X has now officially opened this...
Rumors circulating on social media recently claimed that Google had changed its policies and would begin using...
Meta has long insisted that Facebook users identify themselves with their real names, a policy that—despite a...
Google is accelerating the monetization of its AI-powered search experience and has begun testing the insertion of...
Starting a business is exciting, but finding the money to get it off the ground can feel...
AhnLab SEcurity Intelligence Center (ASEC) has uncovered a new malware distribution campaign compromising the website of a...
CISA has issued a critical warning, adding three actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog
SolarWinds has issued an urgent security advisory regarding multiple critical vulnerabilities discovered in its Access Rights Manager product
CVE-2024-37381 could have enabled authenticated attackers within the same network to execute arbitrary code on affected systems
GitLab is in discussions with investment bankers regarding a potential sale, attracting interest from industry peers like Datadog
Apache Airflow has released a security update to address a potentially severe code execution vulnerability (CVE-2024-39877)
CVE-2024-6457 leaves over 100,000 WooCommerce-powered online stores susceptible to unauthorized data breaches
CVE-2024-21687, and CVE-2024-21686 have the potential to compromise sensitive data and disrupt operations for organizations
A RCE vulnerability, tracked as CVE-2024-27348, is currently under active exploitation in the wild, targeting Apache HugeGraph-Server deployments
JPCERT/CC has released a comprehensive report detailing ongoing cyberattacks by the notorious MirrorFace LODEINFO and NOOPDOOR malware
CVE-2024-6689 resides within the baramundi Management Agent (bMA) and could enable a local attacker to elevate their privileges
The Phylum Research Team recently uncovered a sophisticated cyberattack targeting developers using the npm package registry
Security researcher John Castro has uncovered a critical vulnerability (CVE-2024-6695) in Profile Builder, a widely used WordPress plugin
CybrX, who reported the CVE-2024-6345 vulnerability, has published a detailed technical analysis and proof-of-concept exploit code
A high-severity vulnerability in the Linux kernel has been found to affect a wide range of Moxa industrial networking and computing products
CosmicSting vulnerability identified as a severe threat to Adobe Commerce and Magento stores, is now actively being exploited in the wild
The Jellyfish Loader was discovered within a ZIP file initially uploaded from Poland. This file contained a Windows shortcut (.lnk)
CVE-2023-41916, CVE-2023-46801, and CVE-2023-49566, could allow attackers to read arbitrary files, execute remote code, and perform JNDI injection attacks
A new, insidious phishing scam targeting employees' Microsoft credentials has been unveiled by cybersecurity experts at Cofense
Adding to the urgency, the proof-of-concept (PoC) exploit code for CVE-2024-36401 has already been published online.
A critical zero-day vulnerability has been identified in Alibaba's Nacos platform, a widely used open-source tool for dynamic service
CVE-2024-6744 has been assigned a critical severity score of 9.8 on the CVSS scale, indicating its high potential impact on affected systems.
Alphabet, Google's parent company, plans to acquire the cybersecurity startup Wiz for $23 billion, with the deal potentially concluding soon.