Do Son
In May 2025, Google introduced a one-year Google AI Pro subscription package for university students across the...
Latest news
ASUSTOR has issued a security advisory warning of a critical DLL hijacking vulnerability affecting its backup and...
A widely used Python library implementing JOSE standards, joserfc, has disclosed a critical uncontrolled resource consumption vulnerability—tracked...
In a joint announcement, the Cybersecurity and Infrastructure Security Agency (CISA)—alongside the NSA, FBI, DoD Cyber Crime...
A new technical deep-dive by malware researcher 0x0d4y reveals the inner workings of ScoringMathTea, a sophisticated remote...
A newly released analysis from Unit 42 details how a global data storage and infrastructure company was...
The Cybereason Threat Intelligence Team has published an in-depth analysis of a rapidly evolving ransomware group known...
The Akamai Hunt team has uncovered a new malware strain that hides its command-and-control (C2) traffic behind...
A new report from Trend Research warns that ransomware operators are rapidly shifting their focus from traditional...
A highly active cybercriminal group has shifted tactics in a long-running campaign that abuses remote monitoring and...
These vulnerabilities, identified as CVE-2024-6422 and CVE-2024-6421, pose significant risks, including information disclosure
ASEC reveals new cyberattacks utilizing a novel method to distribute the AsyncRAT remote access trojan (RAT)
Session Hijacking: Unauthorized users may hijack console sessions, gaining elevated privileges (CVE-2024-36451).
CVE-2024-5910 affects Expedition configuration management tool and could allow an attacker with network access to take over admin accounts
Resurgence of Mirai botnet variants, coupled with AI-enhanced DDoS attacks, underscores the critical need for robust cybersecurity measures
The lighttpd project has now obtained CVE-2018-25103 to formally identify the vulnerability and alert supply-chain partners
Group-IB provides a detailed examination of this breach, shedding light on the tactics employed by the emerging threat actor known as EstateRansomware
CVE-2024-6385 enables attackers to impersonate other users and run arbitrary pipeline jobs, posing a significant risk
These vulnerabilities, assigned CVEs 2024-28747 through 2024-28751, could allow attackers to seize control of affected devices
Recorded Future's Insikt Group has exposed "Vortax," as a sophisticated front for a massive malware operation targeting cryptocurrency users
Security researcher Janggggg has disclosed PoC exploit code for three vulnerabilities (CVE-2024-38023, CVE-2024-38024, CVE-2024-38094)
CVE-2024-6235 and CVE-2024-6236 could allow unauthorized access to sensitive information and even cause denial-of-service (DoS) attacks
OpenVPN, a leading provider of virtual private network solutions, has refuted claims of zero-day vulnerabilities in its OpenVPN2 software
According to the ImmuneFi Severity Classification System, the severity of CVE-2024-39696 has been classified as Critical
Despite the critical nature of CVE-2023-46685, LevelOne has declined to patch the vulnerability in their software.
A new, insidious phishing scam impersonating India's RTO has been detected, preying on unsuspecting Android users via WhatsApp
Cybersecurity researchers at Morphisec have discovered a critical zero-click remote code execution (RCE) vulnerability, CVE-2024-38021
This zero-day vulnerability, designated CVE-2024-38112, has been addressed by Microsoft in its July 2024 Patch Tuesday update
CVE-2024-6409, has been found to expose systems to potential remote code execution (RCE) due to a race condition in signal handling
A PoC exploit has been released, targeting a recently patched high-severity vulnerability (CVE-2024-22274) in the VMware vCenter Server
The most severe vulnerability, CVE-2024-36138, is a bypass of an incomplete fix for a previous issue, CVE-2024-27980
Apache Software Foundation has issued an urgent security advisory, disclosing two critical vulnerabilities (CVE-2024-38346 and CVE-2024-39864)