These security flaws, impacting GeoSolutionsGroup, the Linux Kernel, and Roundcube Webmail are now under active exploitation.
CVE-2024-38373 has been discovered in FreeRTOS-Plus-TCP, a popular TCP/IP stack widely used in Internet of Things (IoT) devices
Progress has issued a dire warning to all users of its WhatsUp Gold network monitoring software, revealing a series of severe vulnerabilities
SpyMax's attack strategy begins with a seemingly harmless phishing image that cleverly mimics the official Telegram app.
The publication of CVE-2024-5806 vulnerability details and (PoC) exploit code on June 25, 2024, has led to immediate exploitation attempts
Singapore's digital landscape is facing a mounting threat as cybercriminals exploit stolen digital identities of its citizens on the Dark Web
With a CVSS score of 9.1, the CVE-2024-5805 vulnerability enables attackers to bypass SFTP authentication mechanisms
A critical vulnerability tracked as CVE-2024-5488 has been discovered in SEOPress, a popular WordPress plugin with over 300,000 active installations
A new and sophisticated cyber attack campaign has surfaced, leveraging a weaponized Microsoft Word document to deliver the notorious Remcos RAT
Upon activation, StrelaStealer methodically scans the compromised system, first targeting Thunderbird email clients.
WordPress has released a critical security update to address three vulnerabilities that could potentially expose millions of websites to cyber attacks
the technical details and PoC exploit code for a vulnerability in the Bluetooth Low Energy library in Windows, designated as CVE-2023-24871
WordPress, the world's most popular CMS, is facing a significant security threat in the form of a widespread supply chain attack
One of the most critical vulnerabilities (CVE-2024-6246) is a heap-based buffer overflow in the Realtek Wi-Fi driver of Wyze Cam v3
The attacks utilize a previously undocumented backdoor, dubbed "Niki", showcasing the evolving tactics of these persistent threat actors
CVE-2024-29868 stems from the platform's use of a weak random number generator in its user self-registration and password recovery processes
cybersecurity researcher Andreas Pfefferle at Redguard has unearthed five critical security vulnerabilities in Bludit
Insikt Group have revealed a widespread cyber espionage campaign orchestrated by a Chinese state-sponsored group known as RedJuliett
A security researcher has published details and proof-of-concept (PoC) code for a CVE-2024-27815 vulnerability in the XNU kernel
GrimResource technique capitalizes on an old XSS vulnerability in the apds.dll library, enabling attackers to execute arbitrary JavaScript code
The active exploitation of CVE-2024-29973 by a Mirai-like botnet underscores the urgency of applying the necessary security patches
Do Son 
