Latest news
Modzero unveiled a series of severe vulnerabilities in MailCleaner, a widely-used email filtering appliance designed to protect against spam
If left unpatched, the CVE-2024-33891 (CVSS 8.8) vulnerability allows attackers to bypass authentication completely
Akamai security researchers highlight the shocking scale of phishing scams impersonating the United States Postal Service (USPS)
Avast has been hit with a hefty $14.8 million fine by the ÚOOÚ for alleged violations of the European Union's General Data Protection Regulation (GDPR)
The Pathfinder attack exposes two high-resolution side-channel attacks leveraging the Conditional Branch Predictor (CBP)
CVE-2024-32766 (CVSS 10) is an OS command injection, a technique where attackers can send malicious commands to a vulnerable system
The vulnerability, now patched, resided in Telegram's "Mini App" system. These mini web applications, designed to run within Telegram
Cybersecurity researcher shared technical details and PoC exploit for a high-severity EoP flaw (CVE-2024-26218) bug affecting Windows Kernel.
Cato Networks reported intercepting several attempts aimed at installing the XMRig cryptocurrency mining malware using this vulnerability
troubling cyber campaign, dubbed FROZEN#SHADOW, threat actors have leveraged the relatively unknown SSLoad malware
Sources within Google reveal that the company recently laid off its dedicated Python maintenance team.
Mitel's Security Bulletin 24-0011-001 details a critical stored XSS vulnerability in the Ignite component of MiContact Center Business
Security researcher has released PoC exploit code for CVE-2024-21345, a high-severity Windows Kernel Elevation of Privilege vulnerability
Security experts at eSentire have sounded the alarm on a new wave of FakeBat malware attacks. Threat actors are refining their methods
Security researchers have sounded the alarm, cutting through misinformation to expose a dangerous new development in the LightSpy malware
A serious security vulnerability in Webmin, a widely used web-based system administration tool for Unix-like servers, has been discovered
CVE-2023-6095, CVE-2023-6096 & CVE-2023-6116 could potentially allow unauthorized remote code execution and compromise device security.
During their investigation, ThreatFabric identified a new actor in the Brokewell mobile malware arena—dubbed "Baron Samedit."
CVE-2024-4163 allows attackers to escalate their privileges and potentially take complete control of the affected devices
thousands of live API keys, authentication tokens, and sensitive data are readily accessible on Postman's Public API Network
MuddyWater, an Iranian state-backed hacking group, is exploiting the legitimate remote monitoring and management (RMM) solution
Threat research team has recently uncovered sophisticated .NET managed code injection methods employed by the notorious AgentTesla malware