Latest news
A bespoke backdoor known as Kapeka (also dubbed KnuckleTouch) has been spotlighted for its sophisticated capabilities
The CVE-2024-34456 vulnerability in question allowed for the injection of a custom dynamic library (dylib) into the Antivirus One application
The vulnerability, CVE-2023-49606, poses a severe threat to users of the software's most recent versions, with a CVSS rating of 9.8
Mac users are facing renewed challenges from an insidious form of malware known as the Atomic Stealer, or AMOS
The vulnerabilities, cataloged as CVE-2024-33788 and CVE-2024-33789, both involve command injection exploits
The sophistication of the D3F@ck Loader extends to its management of these payloads. It retrieves a .NET dropper from the C2 server
The vulnerabilities, tracked as CVE-2024-4215 and CVE-2024-4216, both carried a severity rating of 7.4 on the CVSS.
The United States has formally denounced a series of cyberattacks orchestrated by Russia’s GRU, commonly identified as APT28
Hackers are actively exploiting a flaw in the LiteSpeed Cache Plugin for WordPress, a tool installed on over 5 million websites worldwide
CVE-2024-0087 is rated 9.0 on the CVSS scale, involves a vulnerability where users can redirect logging output to any file
CVE-2024-4439 (CVSS score of 7.2) pertains to a stored Cross-Site Scripting (XSS) flaw in the WordPress Core.
Vladimir Tokarev will detail a series of critical zero-day vulnerabilities (OVPNX) in OpenVPN, the world's leading VPN solution
CVE-2024-30251, is a denial of service (DoS) issue that allows attackers to incapacitate web services with a single malformed POST request
The report highlights an alarming trend where cybercriminals and Advanced Persistent Threat (APT) groups, such as Pawn Storm
CVE-2024-33530 arises when a user, initially placed in a lobby due to the meeting’s settings, is invited into the main conference room
Microsoft Graph API is being used to facilitate communications with command-and-control (C&C) servers hidden within Microsoft’s cloud infrastructure
Security analyst Ben Martin revealed this insidious new tactic. It starts when you visit a website infected with the Mal.Metrica malware
CVE-2024-32114 has been rated with a severity score of 8.5 on the CVSS scale, indicating a high level of risk.
A CVE-2024-20376 flaw in the web-based management interface could allow attackers to send specially crafted requests
CVE-2024-32971 vulnerability with a CVSS score of 9.1, has been discovered in versions 1.44.0 and 1.45.0 of the Apollo Router
APT42 operations are using two custom backdoors: NICECURL and TAMECAT. These backdoors are delivered via spear phishing