Do Son
Addressing recent rumors surrounding the iPhone Air 2, Bloomberg journalist Mark Gurman noted in the latest edition...
Latest news
The pgAdmin development team has issued patches addressing four newly disclosed security vulnerabilities impacting pgAdmin versions up...
The team behind Memos, the privacy-first, self-hosted knowledge base platform, has issued a security advisory for CVE-2024-21635,...
Cisco Talos has released a detailed new analysis showing that the Kraken ransomware group—a successor to the...
IBM has released a new security bulletin addressing multiple high-severity vulnerabilities affecting AIX 7.2, AIX 7.3, and...
Security researchers at NVISO have identified a significant evolution in the long-running Contagious Interview malware campaign, a...
In one of the largest open-source supply chain incidents ever recorded, Amazon Inspector security researchers have uncovered...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a new advisory detailing multiple high-severity vulnerabilities...
Trend Micro researchers have observed a significant resurgence in Lumma Stealer activity—also tracked as Water Kurita—despite a...
A new report from Group-IB exposes a highly automated phishing framework engineered to impersonate Italian IT and...
CVE-2023-32191 (CVSS 10) poses a severe risk to the security and integrity of Kubernetes clusters managed by RKE
Cybersecurity researchers at Avast have unearthed a new and previously undetected variant of the Diamorphine Linux kernel rootkit
CVE-2024-5671 and CVE-2024-5731 leave unprotected systems vulnerable to remote code execution and unauthorized access
As QR code phishing attacks continue to evolve, individuals and organizations must remain vigilant. Cybersecurity awareness is key
EclecticIQ analysts have recently discovered a sophisticated PhaaS platform called ONNX Store, targeting financial institutions worldwide
Rapid7, a cybersecurity firm, has uncovered a recent malvertising campaign using fake software installers to distribute the Oyster backdoor
The first set of vulnerabilities, identified as CVE-2024-37079 and CVE-2024-37080, are classified as heap-overflow vulnerabilities
The CVE-2024-37902 vulnerability stems from how DJL handles archived artifacts, which are collections of files used in deep learning models
Taiwan's CERT has issued a critical security warning regarding a severe flaw (CVE-2024-6047) affecting various end-of-life GeoVision devices
CVE-2024-38457 and CVE-2024-38458 could enable malicious actors to take control of affected servers or inject harmful scripts
Cisco Talos has published a comprehensive report detailing a long-running cyber espionage campaign dubbed "Operation Celestial Force."
The vulnerabilities, assigned CVEs 2024-35304 through 2024-35307, affect Pandora FMS versions 700 to 776 and have received high CVSS scores
This new method has been employed by threat actors such as TA571 and the ClearFake cluster, targeting users with malware including DarkGate
Taiwan's CERT (Computer Emergency Response Team) has issued a critical security advisory regarding a high-severity vulnerability (CVE-2024-6045)
The BlastRADIUS vulnerability (CVE-2024-3596) necessitates a MITM position, implying that a network may already be compromised if exploited
Mandiant, a renowned cybersecurity firm, has issued a warning about the evolving tactics of the financially motivated threat group UNC3944
The flaw, identified as CVE-2024-3105, allows remote code execution (RCE) and poses a severe risk to websites using this plugin
Volexity has revealed a new cyber-espionage campaign targeting Indian government entities, employing a custom-built malware dubbed DISGOMOJI
CVE-2024-3912 (CVSS 9.8) is an arbitrary firmware upload flaw that can be exploited by remote attackers without requiring authentication
TRU has uncovered a new campaign by the SolarMarker threat group, which involves the impersonation of the global employment website Indeed
New Cryptojacking Campaign suspected to be an evolution of the previously identified Spinning YARN operation
CVE-2024-3080 with a CVSS v3.1 score of 9.8, allows unauthenticated remote attackers to gain control of the affected devices