Do Son
For every CISO, the goal is simple but increasingly difficult: stop incidents before they disrupt business. Yet,...
Latest news
The developers behind Open WebUI, an open-source and self-hosted AI interface framework, have issued a security advisory...
The Lat61 Threat Intelligence Team has uncovered a new campaign using Bitcoin-themed lures to distribute DarkComet RAT,...
The CERT Coordination Center (CERT/CC) has issued a vulnerability note highlighting two severe security flaws in Lite...
Researchers from the AhnLab Security Intelligence Center (ASEC) have uncovered a new malware campaign exploiting Remote Monitoring...
Google has released an important security update for Chrome Stable Channel, addressing a high-severity vulnerability in the...
Broadcom has announced a strategic partnership with the AI startup CAMB.AI to jointly develop an entirely new...
Apache OpenOffice has released a crucial security patch, version 4.1.16, to address a flurry of security vulnerabilities...
The Apache Software Foundation (ASF) has released an important security update for Apache OFBiz, its open-source enterprise...
Microsoft has released its November 2025 Patch Tuesday, addressing a total of 68 vulnerabilities, including a high-priority...
The malware file named “.redtail” confirmed the presence of the RedTail cryptominer, previously reported by Cyber Security Associates (CSA)
The malware, identified as an InfoStealer, poses as the official app of Bahrain’s Labour Market Regulatory Authority (LMRA)
Chalubo malware was highly active in late 2023 and early 2024, with over 330,000 unique IP addresses communicating with known C2 servers
A new and sophisticated malware named AsukaStealer has emerged on the cybercrime scene, offering its malicious services
LilacSquid deploys a series of malicious tools, including MeshAgent, a customized version of QuasarRAT, dubbed "PurpleInk,"
ISO 27001 vs. Other Data Security Standards & Regulations: Which One is Right for Your Organization?
ISO 27001 vs. Other Data Security Standards & Regulations: Which One is Right for Your Organization?
we will compare ISO 27001 and other security standards and regulations to help you decide on the right data security standard
A buffer overwrite vulnerability that occurs when NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module
With a CVSS score of 10, CVE-2024-5522 is classified as an SQL Injection (SQLi) vulnerability, a common yet dangerous type of attack
A critical vulnerability (CVE-2024-3273) discovered in multiple end-of-life D-Link network-attached storage (NAS) devices
TIBCO has issued a security advisory warning users of a vulnerability (CVE-2024-4407) in its Managed File Transfer Platform Server
The campaign utilizes a complex DLL side-loading technique involving legitimate files from the IObit anti-malware solution to execute malicious payloads
This flaw, identified as CVE-2024-36383 and rated with a CVSS score of 9.1, could allow attackers to perform arbitrary file deletions
CVE-2024-5296 (CVSS 9.6) - This critical vulnerability allows remote attackers to bypass authentication on affected installations
BitRAT is a powerful remote access tool that grants attackers extensive control over infected systems, enabling them to steal sensitive data
CISA has issued an urgent warning regarding two actively exploited vulnerabilities affecting the Linux Kernel and Check Point Quantum Security Gateways
Security researchers at watchTowr Labs have detailed a zero-day vulnerability (CVE-2024-24919) in Check Point's Remote Access VPN appliances
A security vulnerability, identified as CVE-2024-22263, has been discovered in Spring Cloud Data Flow, a framework widely used
XLab's CTIA System uncovered the abuse of the Kiteshield packer by various cyber threat actors targeting Linux environments
A critical vulnerability (CVE-2024-4358) has been discovered in Progress Telerik Report Server, a popular report management solution
Rebirth botnet operates as a sophisticated cybercrime enterprise, offering a range of DDoS attack services through a web-based storefront
Cybersecurity firm ReliaQuest has published a detailed analysis of a BlackSuit ransomware attack that occurred in April 2024
Cybersecurity researchers at Zscaler ThreatLabz have uncovered a sophisticated Android banking trojan called Anatsa (also known as TeaBot)