Latest news
The Russia-linked Advanced Persistent Threat groups continues to evolve, posing a significant threat to Operational Technology globally
Forcepoint's X-Labs research team has uncovered a sophisticated and stealthy phishing campaign orchestrated by the notorious Darkgate malware
A widespread malvertising campaign is actively targeting individuals searching for popular utilities like WinSCP and PuTTY
CVE-2024-4947 allow attackers to execute harmful code on users' systems, compromising sensitive data and taking control of their devices
Microsoft Threat Intelligence has uncovered a sophisticated ransomware campaign orchestrated by the cybercriminal group Storm-1811
A new report reveals four critical vulnerabilities in ThroughTek's Kalay platform, a cornerstone of the IoT ecosystem
CVE-2024-32741 (CVSS 10): Hardcoded Root Password: The presence of a hardcoded password for the root user and boot loader
HPE Aruba Networking has issued an urgent security advisory, urging customers to patch their Aruba Access Points running InstantOS and ArubaOS 10
This vulnerability, identified as CVE-2023-52424 and dubbed the SSID Confusion Attack, was uncovered by security researcher Mathy Vanhoef
Microsoft swiftly assigned the CVE-2024-30051 identifier to the vulnerability and released a patch during this month's Patch Tuesday
The payloads involved in the exploitation were identified as PureCrypter, which has previously been documented by Any Run
CVE-2024-30040, a Security Feature Bypass vulnerability in Windows MSHTML, could allow attackers to bypass security measures
Proofpoint uncovered a massive campaign distributing LockBit Black ransomware through millions of emails via the Phorpiex botnet
The EDR diagram confirms the presence of these commands, leading to the download of the DanaBot malware from the command-and-control server
Ebury is used to deploy additional malware, including malicious Apache and nginx modules that facilitate web traffic redirection
These flaws, tracked as CVE-2024-22267, CVE-2024-22268, CVE-2024-22269, and CVE-2024-22270, expose users to a range of threats
a critical vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform, tracked as CVE-2024-33006, with a CVSS score of 9.6
This critical security flaw cataloged as CVE-2023-46012 (CVSS 9.8), poses a significant risk to users of the affected routers
Cacti has recently released a crucial security update to address two significant vulnerabilities (CVE-2024-29895 & CVE-2024-30268)
This particular scheme involves the misuse of GoTo Meeting, a popular online meeting platform, to deploy the notorious Remcos Remote Access Trojan
The vulnerability, identified as CVE-2024-4761, is an “Out of bounds write” flaw found in V8, Chrome’s JavaScript engine
Forensic investigations by Rapid7 have linked these activities to the Black Basta ransomware group, known for its disruptive cyber attacks