CVE-2024-3806 (CVSS 9.8): An unauthenticated LFI vulnerability within the porto_ajax_posts function of the Porto theme
TRU have uncovered a disturbing trend in FIN7 attacks demonstrating the notorious cybercrime group's evolving tactics for infiltrating systems
CVE-2024-32980 (CVSS 9.1) has the potential to allow network sandbox escapes in specifically configured Spin applications.
The Qt Group has released a security advisory and accompanying patch in response to a vulnerability (CVE-2024-33861)
eSentire's Threat Response Unit (TRU) has detailed a sophisticated intrusion campaign by the SocGholish cyber threat group
These flaws could potentially allow arbitrary code execution (CVE-2024-24787) and cause infinite loops (CVE-2024-24788) in DNS operations
Researchers have exposed a dangerous set of vulnerabilities within CyberPower's PowerPanel Business Software
AsyncRAT, which stands for Asynchronous Remote Access Trojan, is a sophisticated malware variant meticulously engineered
CVE-2024-34346 (CVSS 8.5) presents a significant risk as it allows for permission escalation through the mishandling of privileged files
Trend Micro has released a security update for its Maximum Security software suite, addressing a privilege escalation flaw (CVE-2024-32849)
CVE-2024-29212 carries a high severity rating with a CVSS score of 8.8, primarily due to its potential to allow remote code execution (RCE)
Attackers are weaponizing two critical vulnerabilities, CVE-2023-46805 and CVE-2024-21887, to spread the notorious Mirai botnet malware
zEus stealer launches a series of checks to determine if it is under analysis, avoiding detection by comparing the computer name
Designated as CVE-2024-4367 in PDF.js and CVE-2024-34342 in React-PDF, this flaw hinges on the improper handling of JavaScript
The Cuckoo malware infiltrates computers unsuspectingly and exploits their resources to steal information and spy on users.
The attackers then deployed a Perl-based web shell, dubbed ROOTROT, which is linked to the China-based hacking group UNC5221
By following these steps, you can easily protect yourself from becoming a victim of URL phishing attacks and thus enhance your online safety
The technical details and proof-of-concept (PoC) code are now available for a high-severity vulnerability (CVE-2024-21006)
The CVE-2024-4041 vulnerability stems from insufficient input sanitization and output escaping mechanisms within the plugin
TunnelVision, officially cataloged as CVE-2024-3661, exploits a fundamental flaw in how devices on a local network handle routing decisions
Do Son 
