Do Son
Researchers at Mandiant Threat Defense, part of Google Cloud Security Operations, have revealed that a critical unauthenticated...
Latest news
The maintainers of SuiteCRM, the popular open-source customer relationship management (CRM) platform, have released an urgent security...
The Australian Government has announced financial sanctions and travel bans on four entities and one individual involved...
Researchers from Cyble Research and Intelligence Labs (CRIL) have uncovered a massive, multi-brand phishing campaign that uses...
Devolutions, a leading provider of privileged access management (PAM) and remote connection solutions, has released an urgent...
A critical configuration flaw (CVE-2025-59396) has been discovered in WatchGuard Firebox devices, allowing remote attackers to gain...
GE Vernova’s Electrification Software division has released a critical security advisory addressing a high-severity authentication vulnerability (CVE-2025-3222)...
The Genians Security Center (GSC) has uncovered a new phase in the KONNI APT campaign, revealing a...
A critical vulnerability in Calibre, the popular cross-platform e-book manager, allows arbitrary code execution when an attacker...
Cybersecurity researchers at ENKI have identified a new variant of the Comebacker backdoor, attributed to the North...
CVE-2024-22273 affects VMware ESXi, Workstation, and Fusion—foundational tools for virtual machine creation and management
The ability for unauthenticated attackers to execute arbitrary code (CVE-2024-29822 through CVE-2024-29827) could lead to complete system takeover
CRIL identified a sophisticated campaign employing a tiny, stealthy backdoor, now suspected to be the work of the infamous Turla APT group
The impact can be significant, particularly for flaws CVE-2024-29849 and CVE-2024-29850, which allow unauthorized access and account takeover
These Docusign Phishing Templates are being traded on cybercrime forums, particularly on a Russian cybercrime forum
Horizon3.ai published the technical details and a proof-of-concept (PoC) for a critical unauthenticated RCE vulnerability (CVE-2023-34992)
The emergence of Void Manticore and its collaboration with Scarred Manticore underscores the escalating threat posed by state-sponsored cyber actors
Elastic Security Labs has shed light on a complex and insidious crypto-mining operation codenamed REF4578, with its core payload, GHOSTENGINE
Codean Labs published the technical details and a proof-of-concept (PoC) exploit code for a high-severity CVE-2024-4367 vulnerability
When it comes to comparing different web browsers such as edge vs chrome, there are a lot of...
GitHub has disclosed a critical security vulnerability (CVE-2024-4985) in its self-hosted GitHub Enterprise Server (GHES) product
A critical memory corruption vulnerability, dubbed Linguistic Lumberjack (CVE-2024-4323), has been uncovered in Fluent Bit
The first vulnerability, tracked as CVE-2023-43208 (CVSS 9.8), affects NextGen Healthcare's Mirth Connect.
The attackers exploited a known flaw in Microsoft Exchange Server, known as ProxyShell, to inject the keylogger into the server’s main page
CVE-2024-4709, CVE-2024-2771, and CVE-2024-2782, range from cross-site scripting (XSS) to unauthorized access and privilege escalation
Security researchers at Intego have uncovered a new variant of the "Cuckoo" Mac malware, a strain of the notorious Atomic macOS Stealer
CVE-2024-34359 allow attackers to execute arbitrary code on systems using the library, leading to data breaches and system compromise
A new report reveals a disturbing trend in cyber attacks: the increasing use of Microsoft OneNote files to deliver malicious payloads
CVE-2024-3368 enables attackers to inject malicious code into websites, potentially leading to unauthorized access, data theft
A new wave of cyberattacks targeting financial institutions has been uncovered, with the notorious Metamorfo banking Trojan at its center
A proof-of-concept (PoC) exploit code for a recently patched zero-day CVE-2024-4947 vulnerability in Google Chrome has surfaced
Cybersecurity researchers at Elastic Security Labs have issued a warning about the increasing prominence of LATRODECTUS, a malware loader