Do Son
METZ CONNECT GmbH, in coordination with CERT@VDE, has issued an urgent security advisory warning of multiple critical...
Latest news
Security researchers at LayerX Security have uncovered a long-running malicious campaign involving VPN and ad-blocking browser extensions...
SolarWinds has released security updates addressing three critical vulnerabilities in Serv-U—its managed file transfer and FTP server...
The Socket Threat Research Team has uncovered a highly coordinated malware campaign operating across seven npm packages,...
The threat group UNC1549, suspected to be linked to Iran, has significantly expanded its cyber-espionage operations across...
The Splunk Threat Research Team (STRT) has uncovered a new variant of a .NET steganographic malware loader...
A new macOS stealer campaign—internally dubbed “Nova” by researchers—has been uncovered by reverse engineer Bruce, revealing a...
cybernewswire
Orem, United States, 18th November 2025, CyberNewsWire
Around 12:30 PM GMT on November 18, numerous users reported that a multitude of major global websites,...
Dubbed "Indirector" attacks, exploit weaknesses in the chip's branch prediction mechanisms to precisely manipulate program execution flow
Water Sigbin employs various techniques, including creating scheduled tasks, adding exclusions to Windows Defender
This vulnerability is not a flaw in the DTLS protocol itself but in its implementation within certain WebRTC media servers
threat actors are increasingly exploiting publicly available Cobalt Strike profiles to mask their malicious activities and bypass security measures
Microsoft has announced a new practice of assigning CVE numbers for significant vulnerabilities found and fixed within their cloud services
this new strain, referred to as "InnoLoader," creates a unique malware instance each time a download request is made
Dan Agbo
DevOps embodies the processes surrounding software delivery. DevOps engineers are responsible for designing deployment architectures, enabling both...
CVE-2024-36072: An unauthenticated attacker could exploit a flaw in the logging component to execute system commands with root privileges
MerkSpy Spyware can silently record keystrokes, capture screenshots, and even steal login credentials from popular web browsers like Chrome
TeamViewer, a remote control tool trusted by millions of users globally, has disclosed a significant cyberattack.
Rapid7 has uncovered a sophisticated supply chain attack targeting users of well-known Windows software tools Notezilla, RecentX, & Copywhiz
Juniper Networks disclosed a critical vulnerability identified as CVE-2024-2973, which has earned a severity rating of 10 on the CVSS scale
A vulnerability has been discovered in TP-Link VIGI NVR4032H network video recorder, a device widely used in surveillance systems
UAC-0184, leverages sophisticated techniques like DLL sideloading and the use of Python-related files to deliver the notorious XWorm RAT
CVE-2024-4196 and CVE-2024-4197, have been identified and could potentially allow remote attackers to gain full control of affected systems
ReversingLabs researchers have uncovered a malicious package named "legacyreact-aws-s3-typescript" on the npm registry
The most severe of these vulnerabilities, CVE-2024-5988 and CVE-2024-5989, have been assigned a CVSS score of 9.8
DBatLoader is being actively distributed via phishing emails, with the malware now packaged in compressed CMD files
Canonical’s new ‘Everything LTS’ initiative expands Ubuntu Pro by integrating thousands of new open source components
CVE-2024-5655 allows attackers to trigger pipelines as another user under specific conditions, posing a significant security risk
Tenable Research, who discovered and reported the CVE-2024-5276 flaw, has released a proof-of-concept (PoC) exploit code
"8220" mining gang, dubbed "k4spreader," represents a significant evolution in their arsenal, combining advanced persistence mechanisms