Latest news
The first set of vulnerabilities, identified as CVE-2024-37079 and CVE-2024-37080, are classified as heap-overflow vulnerabilities
The CVE-2024-37902 vulnerability stems from how DJL handles archived artifacts, which are collections of files used in deep learning models
Taiwan's CERT has issued a critical security warning regarding a severe flaw (CVE-2024-6047) affecting various end-of-life GeoVision devices
CVE-2024-38457 and CVE-2024-38458 could enable malicious actors to take control of affected servers or inject harmful scripts
Cisco Talos has published a comprehensive report detailing a long-running cyber espionage campaign dubbed "Operation Celestial Force."
The vulnerabilities, assigned CVEs 2024-35304 through 2024-35307, affect Pandora FMS versions 700 to 776 and have received high CVSS scores
This new method has been employed by threat actors such as TA571 and the ClearFake cluster, targeting users with malware including DarkGate
Taiwan's CERT (Computer Emergency Response Team) has issued a critical security advisory regarding a high-severity vulnerability (CVE-2024-6045)
The BlastRADIUS vulnerability (CVE-2024-3596) necessitates a MITM position, implying that a network may already be compromised if exploited
Mandiant, a renowned cybersecurity firm, has issued a warning about the evolving tactics of the financially motivated threat group UNC3944
The flaw, identified as CVE-2024-3105, allows remote code execution (RCE) and poses a severe risk to websites using this plugin
Volexity has revealed a new cyber-espionage campaign targeting Indian government entities, employing a custom-built malware dubbed DISGOMOJI
CVE-2024-3912 (CVSS 9.8) is an arbitrary firmware upload flaw that can be exploited by remote attackers without requiring authentication
TRU has uncovered a new campaign by the SolarMarker threat group, which involves the impersonation of the global employment website Indeed
New Cryptojacking Campaign suspected to be an evolution of the previously identified Spinning YARN operation
CVE-2024-3080 with a CVSS v3.1 score of 9.8, allows unauthenticated remote attackers to gain control of the affected devices
A security researcher has published PoC code targeting a recently patched high-severity vulnerability in Microsoft Windows (CVE-2024-26229)
Hundreds of fraudulent websites have been identified, falsely claiming to sell tickets to the Paris 2024 Summer Olympic Games
A high-severity vulnerability, identified as CVE-2022-23829 (CVSS 8.2), has been discovered in various AMD processors
A new phishing technique exploiting Progressive Web Apps (PWAs) has been brought to light by cybersecurity researcher Mr.d0x
ASEC has disclosed a new cyberespionage campaign attributed to the North Korean state-sponsored group Kimsuky
cybersecurity researchers have unveiled a sophisticated new backdoor, dubbed "BadSpace," that poses a significant threat to internet users