Latest news
ANY.RUN, a popular malware analysis service, has reported a recent security incident involving a phishing attack
The vulnerability, tracked as CVE-2024-6027 (CVSS 9.8), could allow attackers to extract sensitive information from a store's database
The flaw, designated CVE-2024-28397 and assigned a high CVSS score of 8.8, enables malicious actors to break out of the JavaScript sandbox
The vulnerability, identified as CVE-2024-36680, allows unauthorized users to inject malicious SQL code into the website's database
A newly discovered vulnerability dubbed "CosmicSting" (CVE-2024-34102) has sent shockwaves through the e-commerce world
Given the critical nature of these vulnerabilities, it is imperative for all Ghostscript users to update to version 10.03.1 immediately
From early to mid-June 2024, the Zergeca botnet primarily targeted regions such as Canada, the United States, and Germany
CVE-2024-0087, rated with a critical CVSS score of 9.0, allows attackers to exploit Triton Server's log configuration interface to write arbitrary files
SocGholish, a sophisticated JavaScript malware framework, has been a persistent threat since its emergence in 2017.
The French National Cybersecurity Agency (ANSSI) has issued a warning about the continued activity of the Nobelium intrusion set
The perpetrators, utilizing tools linked to various Chinese espionage groups, have successfully penetrated these telecom networks
Fortra has issued a security advisory warning users of a high-severity flaw (CVE-2024-5275) in both FileCatalyst Direct and FileCatalyst Workflow
CVE-2024-28995 is a path-traversal vulnerability that allows unauthenticated attackers to retrieve arbitrary files from the filesystem
UNC3886 exploited a now-patched vulnerability in FortiOS, alongside a custom malware ecosystem targeting Fortinet devices
DataDog Security Labs has uncovered a concerning campaign targeting Amazon Web Services (AWS) environments
Fickle Stealer executes several scripts designed to bypass User Account Control (UAC) and prepare the environment for the main payload
CVE-2023-32191 (CVSS 10) poses a severe risk to the security and integrity of Kubernetes clusters managed by RKE
Cybersecurity researchers at Avast have unearthed a new and previously undetected variant of the Diamorphine Linux kernel rootkit
CVE-2024-5671 and CVE-2024-5731 leave unprotected systems vulnerable to remote code execution and unauthorized access
As QR code phishing attacks continue to evolve, individuals and organizations must remain vigilant. Cybersecurity awareness is key
EclecticIQ analysts have recently discovered a sophisticated PhaaS platform called ONNX Store, targeting financial institutions worldwide
Rapid7, a cybersecurity firm, has uncovered a recent malvertising campaign using fake software installers to distribute the Oyster backdoor