Do Son
Google has recently introduced a new “Excessive Wake Lock” metric for Android app developers. If an application...
Latest news
Fueled by the explosive growth of the artificial intelligence industry, demand for GPUs and other computing hardware...
In the age of artificial intelligence, the decline of traditional websites has become inevitable — even platforms...
Zimbra has issued a critical security patch, Zimbra Daffodil (v10.1.13), to address a host of vulnerabilities in...
Today, SAP released its latest batch of Security Patch Day updates, delivering 18 new security notes and...
Critical Synology BeeStation Zero-Day (CVE-2025-12686) Found at Pwn2Own Allows Remote Code Execution
Critical Synology BeeStation Zero-Day (CVE-2025-12686) Found at Pwn2Own Allows Remote Code Execution
Synology has released an urgent security update for its BeeStation OS, patching a zero-day vulnerability (CVE-2025-12686) that...
Microsoft has officially confirmed the upcoming release of Windows 11 version 26H1, which will be available exclusively...
The Mozilla Foundation has not introduced a new logo this time. Instead, it has unveiled a new mascot...
Most modern smartphones and tablets are equipped with miniature vibration motors that provide haptic feedback, producing subtle...
The European Union is currently engaged in a heated debate over the allocation of the 6GHz wireless...
This RCE vulnerability was facilitated through the use of Cog, Replicate’s proprietary format for containerizing AI models.
attackers are leveraging an obscure WordPress plugin to install server-side malware, harvesting credit card details from WooCommerce online stores
Researchers have unveiled a potent new method for launching distributed denial-of-service (DDoS) attacks, dubbed DNSBomb (CVE-2024-33655)
Qlik, a prominent player in the data analytics space, has issued a security advisory warning users of a high-risk flaw (CVE-2024-36077)
The persistent cyber threat known as Kinsing malware has taken a new and sophisticated approach to its cryptojacking campaign
The vulnerability, designated CVE-2024-34710, poses a serious risk due to its potential for stored cross-site scripting (XSS) attacks
CVE-2024-28063 & CVE-2024-28064 could allow attackers to access sensitive information, delete files, and potentially launch DoS attacks
A recent attack by the Ransomhub ransomware gang has amplified concerns about the vulnerability of these critical systems
Google issued an emergency security update for its Chrome browser Thursday, urgently addressing a zero-day vulnerability (CVE-2024-5274)
Ikaruz Red Team has been active in the Philippines, conducting attacks through various methods including defacements, small-scale DDoS attacks
The vulnerability in question (CVE-2020-17519) is a directory traversal flaw that allows attackers to read arbitrary files
A critical vulnerability, designated CVE-2024-4978, has been discovered in Justice AV Solutions (JAVS) Viewer software
CVE-2024-20360, carries a CVSS score of 8.8, signifying a high severity level and the potential for widespread exploitation.
Sonatype has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-4956) in Nexus Repository
CVE-2024-36080 and CVE-2024-36081, pose significant risks to affected systems and necessitate immediate attention and action
The severity of CVE-2024-29269 is further highlighted by the recent publication of a proof-of-concept (PoC) by security researcher Chocapikk.
UAC-0006 is known for its use of the SMOKELOADER malware, a versatile tool often used to deliver additional malicious payloads
The most severe vulnerability, CVE-2024-4835 (CVSS 8.0), involves a cross-site scripting (XSS) flaw in the code editor on gitlab.com
The vulnerability (CVE-2024-33899 for Linux/Unix, CVE-2024-36052 for Windows) poses a greater threat on Linux and Unix
SamsStealer casts a wide net, targeting a broad spectrum of applications and platforms to maximize its data collection potential
The CVE-2024-31989 vulnerability affects anyone who does not have strict access controls on their Redis instance
CVE-2024-21683 allow attackers to seize control of affected systems, potentially leading to data breaches and operational disruptions