Latest news
Microsoft Graph API is being used to facilitate communications with command-and-control (C&C) servers hidden within Microsoft’s cloud infrastructure
Security analyst Ben Martin revealed this insidious new tactic. It starts when you visit a website infected with the Mal.Metrica malware
CVE-2024-32114 has been rated with a severity score of 8.5 on the CVSS scale, indicating a high level of risk.
A CVE-2024-20376 flaw in the web-based management interface could allow attackers to send specially crafted requests
CVE-2024-32971 vulnerability with a CVSS score of 9.1, has been discovered in versions 1.44.0 and 1.45.0 of the Apollo Router
APT42 operations are using two custom backdoors: NICECURL and TAMECAT. These backdoors are delivered via spear phishing
CVE-2024-32962, carries the highest severity score of 10 on the Common Vulnerability Scoring System (CVSS), indicating its critical nature
Dropbox has confirmed a security breach within its Dropbox Sign (formerly HelloSign) service, exposing customer data
Interestingly, there is a noted overlap between Cuttlefish and a previously identified malware cluster known as HiatusRat
Security researchers at SentinelOne have identified new Adload variants that successfully evade Apple's detection mechanisms.
Dirty Stream exploits path traversal vulnerabilities when applications share data using Android's ContentProvider components
HPE Aruba Networking announced a comprehensive update to its ArubaOS software, targeting multiple critical vulnerabilities
Goldoon botnet is ruthlessly exploiting a CVE-2015-2051 vulnerability in D-Link devices to commandeer them for malicious activities
TargetCompany ransomware group is actively deploying Mallox ransomware alongside other malicious tools to exploit vulnerable database servers.
CVE-2024-29010 & CVE-2024-29011 could be exploited by attackers to gain unauthorized access to sensitive data and bypass authentication mechanisms
Cisco Talos have unveiled a coordinated threat actor campaign dubbed "ArcaneDoor," targeting government-owned network devices globally
A comprehensive report has uncovered the money laundering tactics employed by the North Korean hacking collective, Lazarus Group
CVE-2024-27790 could have potentially enabled attackers to gain access to records they should not have been authorized to see or modify.
CISA added a recently patched Microsoft vulnerability (CVE-2024-29988) to its Known Exploited Vulnerabilities (KEV) catalog
Security researchers at Zscaler have uncovered a new anti-analysis feature in recent iterations of the Zloader malware
CVE-2024-2912 vulnerability lies in the way the software handles data, allowing attackers to run arbitrary code on servers running BentoML
Wpeeper is a backdoor Trojan with typical features such as collecting sensitive information from devices, managing files and directories