Latest news
The vulnerability, CVE-2024-35205, arises from the application's failure to properly sanitize filenames before processing them
The malicious package, disguised as a fork of the widely used "requests" library, contained a hidden Go binary embedded within a PNG image
PowerDNS, a widely used open-source DNS software provider, has issued a security advisory regarding a vulnerability (CVE-2024-25581)
Among the most alarming vulnerabilities addressed in this update is CVE-2024-25641, with a CVSS score of 9.1.
These scams go beyond the typical emotional manipulation seen in traditional romance scams, incorporating elaborate schemes involving fake cryptocurrency exchanges
the update also fixes two other 'High' severity flaws and a unique 'Low' severity vulnerability specific to Microsoft Edge (CVE-2024-30055
Dor Segal has revealed a critical vulnerability in FIDO2, the popular passwordless authentication standard
NHS England Digital has issued a critical alert concerning vulnerabilities in Arcserve’s Unified Data Protection (UDP) software
CRIL published a detailed analysis of a newly identified ransomware variant named Trinity, highlighting its potential links to Venus ransomware
A serious vulnerability (CVE-2024-32113) has been uncovered in Apache OFBiz, a popular suite of enterprise software tools
Scattered Spider, also known by multiple aliases including 0ktapus and Muddled Libra, is a financially motivated threat actor group active
Chatbots are classified into different categories, ranging from menu-based to AI chatbots. Read here to learn the most secure chatbot options
CVE-2024-4434 (CVSS score of 9.8), is an unauthenticated time-based SQL Injection through the ‘term_id’ parameter.
The reliability of public cloud services, Google Cloud accidentally deleted the entire online account of UniSuper
The vulnerabilities, tracked as CVE-2024-28075 and CVE-2024-23473, were discovered by ZDI vulnerability researcher Piotr Bazydło
Tycoon 2FA operates by using an adversary-in-the-middle (AitM) approach. Its primary function is to harvest session cookies
The flaw, tracked as CVE-2024-27793, was discovered by Willy R. Vasquez, a security researcher at The University of Texas at Austin.
A high-severity security vulnerability (CVE-2024-32655) has been discovered in Npgsql, a widely used open-source data provider
Technical details have emerged about a significant security vulnerability, CVE-2024-21115, which has been discovered in Oracle VM VirtualBox
The flaw, designated CVE-2024-4671, is a "use after free" bug located within the browser's "Visuals" component.
Recent discoveries have exposed CVE-2024-34350 & CVE-2024-34351 which could compromise user data and server operations
CVE-2024-4701 (CVSS 9.9) has been discovered in Genie, Netflix's popular open-source job orchestration engine for big data processing