Latest news
CVE-2024-36072: An unauthenticated attacker could exploit a flaw in the logging component to execute system commands with root privileges
MerkSpy Spyware can silently record keystrokes, capture screenshots, and even steal login credentials from popular web browsers like Chrome
TeamViewer, a remote control tool trusted by millions of users globally, has disclosed a significant cyberattack.
Rapid7 has uncovered a sophisticated supply chain attack targeting users of well-known Windows software tools Notezilla, RecentX, & Copywhiz
Juniper Networks disclosed a critical vulnerability identified as CVE-2024-2973, which has earned a severity rating of 10 on the CVSS scale
A vulnerability has been discovered in TP-Link VIGI NVR4032H network video recorder, a device widely used in surveillance systems
UAC-0184, leverages sophisticated techniques like DLL sideloading and the use of Python-related files to deliver the notorious XWorm RAT
CVE-2024-4196 and CVE-2024-4197, have been identified and could potentially allow remote attackers to gain full control of affected systems
ReversingLabs researchers have uncovered a malicious package named "legacyreact-aws-s3-typescript" on the npm registry
The most severe of these vulnerabilities, CVE-2024-5988 and CVE-2024-5989, have been assigned a CVSS score of 9.8
DBatLoader is being actively distributed via phishing emails, with the malware now packaged in compressed CMD files
Canonical’s new ‘Everything LTS’ initiative expands Ubuntu Pro by integrating thousands of new open source components
CVE-2024-5655 allows attackers to trigger pipelines as another user under specific conditions, posing a significant security risk
Tenable Research, who discovered and reported the CVE-2024-5276 flaw, has released a proof-of-concept (PoC) exploit code
"8220" mining gang, dubbed "k4spreader," represents a significant evolution in their arsenal, combining advanced persistence mechanisms
These security flaws, impacting GeoSolutionsGroup, the Linux Kernel, and Roundcube Webmail are now under active exploitation.
CVE-2024-38373 has been discovered in FreeRTOS-Plus-TCP, a popular TCP/IP stack widely used in Internet of Things (IoT) devices
Progress has issued a dire warning to all users of its WhatsUp Gold network monitoring software, revealing a series of severe vulnerabilities
SpyMax's attack strategy begins with a seemingly harmless phishing image that cleverly mimics the official Telegram app.
The publication of CVE-2024-5806 vulnerability details and (PoC) exploit code on June 25, 2024, has led to immediate exploitation attempts