Latest news
CatDDoS-related gangs have leveraged a wide array of vulnerabilities across multiple vendor devices like Apache, Cisco, D-Link, Huawei, ...
The researchers likened the analysis of Unfading Sea Haze's malware arsenal to a "museum exposition of cyberespionage relics,"
One of the most notable aspects of CLOUD#REVERSER is its use of Google Drive and Dropbox for C2 communication and data exfiltration
Researchers revealed a sustained campaign by Pakistani-based cyber espionage group APT36 targeting critical Indian government
Security researcher Matthias Gerstner has discovered a critical vulnerability (CVE-2024-5148) in GNOME Remote Desktop
This RCE vulnerability was facilitated through the use of Cog, Replicate’s proprietary format for containerizing AI models.
attackers are leveraging an obscure WordPress plugin to install server-side malware, harvesting credit card details from WooCommerce online stores
Researchers have unveiled a potent new method for launching distributed denial-of-service (DDoS) attacks, dubbed DNSBomb (CVE-2024-33655)
Qlik, a prominent player in the data analytics space, has issued a security advisory warning users of a high-risk flaw (CVE-2024-36077)
The persistent cyber threat known as Kinsing malware has taken a new and sophisticated approach to its cryptojacking campaign
The vulnerability, designated CVE-2024-34710, poses a serious risk due to its potential for stored cross-site scripting (XSS) attacks
CVE-2024-28063 & CVE-2024-28064 could allow attackers to access sensitive information, delete files, and potentially launch DoS attacks
A recent attack by the Ransomhub ransomware gang has amplified concerns about the vulnerability of these critical systems
Google issued an emergency security update for its Chrome browser Thursday, urgently addressing a zero-day vulnerability (CVE-2024-5274)
Ikaruz Red Team has been active in the Philippines, conducting attacks through various methods including defacements, small-scale DDoS attacks
The vulnerability in question (CVE-2020-17519) is a directory traversal flaw that allows attackers to read arbitrary files
A critical vulnerability, designated CVE-2024-4978, has been discovered in Justice AV Solutions (JAVS) Viewer software
CVE-2024-20360, carries a CVSS score of 8.8, signifying a high severity level and the potential for widespread exploitation.
Sonatype has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-4956) in Nexus Repository
CVE-2024-36080 and CVE-2024-36081, pose significant risks to affected systems and necessitate immediate attention and action
The severity of CVE-2024-29269 is further highlighted by the recent publication of a proof-of-concept (PoC) by security researcher Chocapikk.