Latest news
Critical Synology BeeStation Zero-Day (CVE-2025-12686) Found at Pwn2Own Allows Remote Code Execution
A widespread email scam campaign is targeting students, faculty, healthcare workers, and others with offers of free pianos, leading victims
The vulnerability, tracked as CVE-2024-24919, has been assigned a CVSS score of 7.5, indicating high severity.
A distinctive aspect of Operation Diplomatic Specter is the use of previously undocumented backdoors, named TunnelSpecter and SweetSpecter
The flaw, tracked as CVE-2024-5027, could allow an attacker with local access to a Mac device to escalate their privileges to the highest level
Moonstone Sleet deployed a new ransomware variant named FakePenny. This ransomware was used to target a company
Critical Security Advisory: Mitel MiCollab Vulnerabilities Exposed (CVE-2024-35285 & CVE-2024-35286)
The vulnerabilities, tracked as CVE-2024-35285 and CVE-2024-35286, have been assigned the highest severity rating of 9.8 on the CVSS
Netskope Threat Labs has revealed a disturbing trend of malicious actors exploiting Cloudflare Workers to launch sophisticated phishing campaigns
The flaw, designated as CVE-2024-5274 (CVSS 8.8), was recently patched by Google after being exploited in the wild
In a parallel effort, Sharp Dragon targeted governmental organizations in the Caribbean, using compromised networks from Southeast Asia
The vulnerability, designated CVE-2024-26289 and assigned a CVSS score of 9.8 (critical), stems from the deserialization of untrusted data
CVE-2024-5035 allows for remote code execution (RCE) due to command injection and buffer overflow issues in the rftest binary
Forcepoint X-Labs has issued an urgent warning regarding a surge in sophisticated phishing emails targeting government departments across the APAC region
Technical details and a proof-of-concept (PoC) exploit code have emerged about a security flaw (CVE-2024-2961) in GNU C Library
Experts have exposed a new ransomware threat named ShrinkLocker, which cleverly exploits Microsoft's built-in BitLocker encryption tool
Security researcher Guillaume André with Synacktiv has detailed a high-severity vulnerability, CVE-2024-26238 (CVSS 7.8)
NetbyteSEC Detecx (NBS) team exposed a sophisticated malware campaign orchestrated by the notorious SharpPanda APT group
Google Cloud has publicly addressed an incident in which a misconfiguration during the setup of a GCVE private cloud
In addition to CVE-2024-27842, Wang Tielei has also released a PoC exploit for CVE-2023-40404, a privilege escalation flaw in macOS Sonoma
Mandiant has revealed a concerning trend among China-linked cyber espionage groups: the use of ORB networks to enhance their espionage capabilities
CVE-2024-25737 and CVE-2024-25738, are both rated with a high CVSS score of 9.1, indicating the potential for significant damage if exploited