Latest news
CVE-2024-21512 stems from a Prototype Pollution vulnerability that could be exploited for remote code execution.
The ReliaQuest Threat Research Team has unveiled a new execution technique used in the ongoing ClearFake campaign
Tracked as CVE-2024-3584, this flaw carries a near-perfect CVSS score of 9.8, underscoring the potential for severe exploitation.
This multi-stage malware strategy ultimately delivers the notorious "Cobalt Strike" payload, establishing communication with a C2 server
The identified flaw, cataloged as CVE-2024-5404 with a CVSS score of 9.8, affects the "Forgot Password" function of the Moneo IIoT platform
WordPress, the world's most popular CMS, is facing a wave of targeted attacks exploiting critical vulnerabilities in several plugins
CVE-2024-36104 could allow remote attackers to execute arbitrary code on affected systems, potentially leading to full system compromise
Censys observed 13,802 internet hosts exposing either a CloudGuard instance, Quantum Security, or Quantum Spark gateway
Hugging Face, a leading provider of open-source machine learning and AI tools, disclosed a security breach affecting its Spaces platform
CVE-2024-3820, rated with a maximum severity score of 10 (CVSS 10), could allow attackers to inject malicious SQL code
BlueDelta even managed to bypass two-factor authentication and CAPTCHA challenges by leveraging compromised Ubiquiti routers
CVE-2024-32850 with a CVSS score of 9.8 (Critical), allows attackers to execute commands remotely or gain unauthorized administrative access.
Designated as CVE-2024-35204, this vulnerability has been assigned a CVSS score of 8.4, indicating its high severity
Krasimir Konov, malware analyst at Sucuri, exposes how hackers are leveraging Telegram's unique features to execute sophisticated website attacks
A new banking Trojan named "CarnavalHeist" is targeting Brazilian users, exploiting the country's festive spirit to steal financial data
The malware file named “.redtail” confirmed the presence of the RedTail cryptominer, previously reported by Cyber Security Associates (CSA)
The malware, identified as an InfoStealer, poses as the official app of Bahrain’s Labour Market Regulatory Authority (LMRA)
Chalubo malware was highly active in late 2023 and early 2024, with over 330,000 unique IP addresses communicating with known C2 servers
A new and sophisticated malware named AsukaStealer has emerged on the cybercrime scene, offering its malicious services
LilacSquid deploys a series of malicious tools, including MeshAgent, a customized version of QuasarRAT, dubbed "PurpleInk,"
ISO 27001 vs. Other Data Security Standards & Regulations: Which One is Right for Your Organization?
we will compare ISO 27001 and other security standards and regulations to help you decide on the right data security standard