Do Son
GE Vernova’s Electrification Software division has released a critical security advisory addressing a high-severity authentication vulnerability (CVE-2025-3222)...
Latest news
The Genians Security Center (GSC) has uncovered a new phase in the KONNI APT campaign, revealing a...
A critical vulnerability in Calibre, the popular cross-platform e-book manager, allows arbitrary code execution when an attacker...
Cybersecurity researchers at ENKI have identified a new variant of the Comebacker backdoor, attributed to the North...
The Acronis Threat Research Unit (TRU) has identified a new DragonForce ransomware variant that showcases a dramatic...
cybernewswire 
Intel is currently undergoing a massive wave of layoffs. Over the past few years, the chipmaker has...
Microsoft’s Threat Intelligence team has disclosed a novel side-channel attack on remote language models, demonstrating that a...
In addition to the upcoming satellite features for the iPhone, Bloomberg News has outlined Apple’s ambitious 2026...
According to a report by Bloomberg’s Mark Gurman in his latest Power On newsletter, Apple is actively...
UAC-0006 is known for its use of the SMOKELOADER malware, a versatile tool often used to deliver additional malicious payloads
The most severe vulnerability, CVE-2024-4835 (CVSS 8.0), involves a cross-site scripting (XSS) flaw in the code editor on gitlab.com
The vulnerability (CVE-2024-33899 for Linux/Unix, CVE-2024-36052 for Windows) poses a greater threat on Linux and Unix
SamsStealer casts a wide net, targeting a broad spectrum of applications and platforms to maximize its data collection potential
The CVE-2024-31989 vulnerability affects anyone who does not have strict access controls on their Redis instance
CVE-2024-21683 allow attackers to seize control of affected systems, potentially leading to data breaches and operational disruptions
CVE-2024-22273 affects VMware ESXi, Workstation, and Fusion—foundational tools for virtual machine creation and management
The ability for unauthenticated attackers to execute arbitrary code (CVE-2024-29822 through CVE-2024-29827) could lead to complete system takeover
CRIL identified a sophisticated campaign employing a tiny, stealthy backdoor, now suspected to be the work of the infamous Turla APT group
The impact can be significant, particularly for flaws CVE-2024-29849 and CVE-2024-29850, which allow unauthorized access and account takeover
These Docusign Phishing Templates are being traded on cybercrime forums, particularly on a Russian cybercrime forum
Horizon3.ai published the technical details and a proof-of-concept (PoC) for a critical unauthenticated RCE vulnerability (CVE-2023-34992)
The emergence of Void Manticore and its collaboration with Scarred Manticore underscores the escalating threat posed by state-sponsored cyber actors
Elastic Security Labs has shed light on a complex and insidious crypto-mining operation codenamed REF4578, with its core payload, GHOSTENGINE
Codean Labs published the technical details and a proof-of-concept (PoC) exploit code for a high-severity CVE-2024-4367 vulnerability
When it comes to comparing different web browsers such as edge vs chrome, there are a lot of...
GitHub has disclosed a critical security vulnerability (CVE-2024-4985) in its self-hosted GitHub Enterprise Server (GHES) product
A critical memory corruption vulnerability, dubbed Linguistic Lumberjack (CVE-2024-4323), has been uncovered in Fluent Bit
The first vulnerability, tracked as CVE-2023-43208 (CVSS 9.8), affects NextGen Healthcare's Mirth Connect.
The attackers exploited a known flaw in Microsoft Exchange Server, known as ProxyShell, to inject the keylogger into the server’s main page
CVE-2024-4709, CVE-2024-2771, and CVE-2024-2782, range from cross-site scripting (XSS) to unauthorized access and privilege escalation
Security researchers at Intego have uncovered a new variant of the "Cuckoo" Mac malware, a strain of the notorious Atomic macOS Stealer