Do Son
Yesterday, we reported that Apple inadvertently exposed the front-end source code of its newly launched Apple App...
Latest news
Cisco has released urgent security updates to address two critical vulnerabilities in its Unified Contact Center Express...
The Google Threat Intelligence Group (GTIG) has released a report revealing that threat actors have moved beyond...
The Django Software Foundation (DSF) has released new security updates for multiple branches of the Django web...
Researchers at Proofpoint Threat Research have identified a previously unknown cyber-espionage group, dubbed UNK_SmudgedSerpent, which has been...
Google has released a Stable Channel Update for Chrome Desktop (version 142.0.7444.134/.135) for Windows, macOS, and Linux...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical advisory detailing three vulnerabilities in the...
In collaboration with the Georgian CERT, researchers from Bitdefender have uncovered a new wave of cyber-espionage activity...
NVIDIA has released an important software security update for the NVIDIA App on Windows systems, addressing a...
The JPCERT/CC Incident Response Group, led by malware analyst Yuma, has published a detailed report on a...
The Cuckoo malware infiltrates computers unsuspectingly and exploits their resources to steal information and spy on users.
The attackers then deployed a Perl-based web shell, dubbed ROOTROT, which is linked to the China-based hacking group UNC5221
By following these steps, you can easily protect yourself from becoming a victim of URL phishing attacks and thus enhance your online safety
The technical details and proof-of-concept (PoC) code are now available for a high-severity vulnerability (CVE-2024-21006)
The CVE-2024-4041 vulnerability stems from insufficient input sanitization and output escaping mechanisms within the plugin
TunnelVision, officially cataloged as CVE-2024-3661, exploits a fundamental flaw in how devices on a local network handle routing decisions
Security researchers at Zscaler’s ThreatLabz have uncovered significant updates to the HijackLoader malware, making it far more...
A bespoke backdoor known as Kapeka (also dubbed KnuckleTouch) has been spotlighted for its sophisticated capabilities
The CVE-2024-34456 vulnerability in question allowed for the injection of a custom dynamic library (dylib) into the Antivirus One application
The vulnerability, CVE-2023-49606, poses a severe threat to users of the software's most recent versions, with a CVSS rating of 9.8
Mac users are facing renewed challenges from an insidious form of malware known as the Atomic Stealer, or AMOS
The vulnerabilities, cataloged as CVE-2024-33788 and CVE-2024-33789, both involve command injection exploits
The sophistication of the D3F@ck Loader extends to its management of these payloads. It retrieves a .NET dropper from the C2 server
The vulnerabilities, tracked as CVE-2024-4215 and CVE-2024-4216, both carried a severity rating of 7.4 on the CVSS.
The United States has formally denounced a series of cyberattacks orchestrated by Russia’s GRU, commonly identified as APT28
Hackers are actively exploiting a flaw in the LiteSpeed Cache Plugin for WordPress, a tool installed on over 5 million websites worldwide
CVE-2024-0087 is rated 9.0 on the CVSS scale, involves a vulnerability where users can redirect logging output to any file
CVE-2024-4439 (CVSS score of 7.2) pertains to a stored Cross-Site Scripting (XSS) flaw in the WordPress Core.
Vladimir Tokarev will detail a series of critical zero-day vulnerabilities (OVPNX) in OpenVPN, the world's leading VPN solution
CVE-2024-30251, is a denial of service (DoS) issue that allows attackers to incapacitate web services with a single malformed POST request
The report highlights an alarming trend where cybercriminals and Advanced Persistent Threat (APT) groups, such as Pawn Storm
CVE-2024-33530 arises when a user, initially placed in a lobby due to the meeting’s settings, is invited into the main conference room