Do Son
Large language models can generate impressive text, answer questions, and engage in conversation. But until recently, they...
Latest news
The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has announced new sanctions against...
The Open Container Initiative (OCI) has released security updates to address three high-severity vulnerabilities affecting its container...
Threat analysts at Sekoia.io have uncovered a global phishing operation that has been targeting the hospitality industry...
High-Severity Cisco ISE Flaw (CVE-2025-20343) Allows Unauthenticated DoS via Crafted RADIUS Requests
High-Severity Cisco ISE Flaw (CVE-2025-20343) Allows Unauthenticated DoS via Crafted RADIUS Requests
Cisco has released a security update to address a high-severity vulnerability (CVE-2025-20343, CVSS 8.6) affecting its Identity...
Cybersecurity firm Darktrace has published a detailed investigation into a DragonForce-affiliated ransomware attack that targeted a manufacturing...
Amazon has released a security update for the WorkSpaces client for Linux, addressing a high-severity vulnerability (CVE-2025-12779)...
Researchers from AhnLab Security Emergency Response Center (ASEC) have identified a new ransomware group named “Cephalus”, which...
The shift to cloud migration alters information management and security. Multi-cloud systems pose new challenges to securing...
Dell Technologies has issued a critical security advisory addressing multiple vulnerabilities in its CloudLink encryption management software,...
a critical vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform, tracked as CVE-2024-33006, with a CVSS score of 9.6
This critical security flaw cataloged as CVE-2023-46012 (CVSS 9.8), poses a significant risk to users of the affected routers
Cacti has recently released a crucial security update to address two significant vulnerabilities (CVE-2024-29895 & CVE-2024-30268)
This particular scheme involves the misuse of GoTo Meeting, a popular online meeting platform, to deploy the notorious Remcos Remote Access Trojan
The vulnerability, identified as CVE-2024-4761, is an “Out of bounds write” flaw found in V8, Chrome’s JavaScript engine
Forensic investigations by Rapid7 have linked these activities to the Black Basta ransomware group, known for its disruptive cyber attacks
The vulnerability, CVE-2024-35205, arises from the application's failure to properly sanitize filenames before processing them
The malicious package, disguised as a fork of the widely used "requests" library, contained a hidden Go binary embedded within a PNG image
PowerDNS, a widely used open-source DNS software provider, has issued a security advisory regarding a vulnerability (CVE-2024-25581)
Among the most alarming vulnerabilities addressed in this update is CVE-2024-25641, with a CVSS score of 9.1.
These scams go beyond the typical emotional manipulation seen in traditional romance scams, incorporating elaborate schemes involving fake cryptocurrency exchanges
the update also fixes two other 'High' severity flaws and a unique 'Low' severity vulnerability specific to Microsoft Edge (CVE-2024-30055
Dor Segal has revealed a critical vulnerability in FIDO2, the popular passwordless authentication standard
NHS England Digital has issued a critical alert concerning vulnerabilities in Arcserve’s Unified Data Protection (UDP) software
CRIL published a detailed analysis of a newly identified ransomware variant named Trinity, highlighting its potential links to Venus ransomware
A serious vulnerability (CVE-2024-32113) has been uncovered in Apache OFBiz, a popular suite of enterprise software tools
Scattered Spider, also known by multiple aliases including 0ktapus and Muddled Libra, is a financially motivated threat actor group active
Chatbots are classified into different categories, ranging from menu-based to AI chatbots. Read here to learn the most secure chatbot options
CVE-2024-4434 (CVSS score of 9.8), is an unauthenticated time-based SQL Injection through the ‘term_id’ parameter.
The reliability of public cloud services, Google Cloud accidentally deleted the entire online account of UniSuper
The vulnerabilities, tracked as CVE-2024-28075 and CVE-2024-23473, were discovered by ZDI vulnerability researcher Piotr Bazydło
Tycoon 2FA operates by using an adversary-in-the-middle (AitM) approach. Its primary function is to harvest session cookies