Latest news
Cyber-Enabled Cargo Theft: Hackers Hijack Logistics Firms with RMM Tools to Steal Physical Shipments
A sophisticated hacking group suspected to be the infamous CoralRaider is ramping up its attacks, using multiple well-known infostealers
The CERT-UA has issued an urgent alert regarding escalated cyber activities by the notorious Russia-backed Sandworm APT group
AhnLab Security Intelligence Center have revealed a growing trend of infostealer malware abusing the Electron framework
SSRF flaw, CVE-2024-31461 with a high CVSS score of 9.1, could allow attackers to take control of servers running vulnerable Plane instances.
CVE-2024-2848 with a CVSS score of 7.5, involves a missing authorization check within the save_footer_text_callback function
Apache HugeGraph has recently addressed several critical security vulnerabilities that posed significant risks to its users
Forest Blizzard has leveraged GooseEgg to exploit a critical vulnerability in the Windows Print Spooler service, identified as CVE-2022-38028
Security researchers from G DATA have analyzed "Sharp Stealer," a malware family that steals login credentials, payment information
This zero-day flaw, identified as CVE-2024-4040 with a CVSS score of 7.7, poses a severe risk to organizations
A new report from Kaspersky Labs reveals a sophisticated toolkit used by the advanced persistent threat (APT) group, "ToddyCat,"
Naor Hodorov has made public a proof-of-concept (PoC) exploit for a severe vulnerability (CVE-2024-21111) in Oracle VirtualBox
Citrix has released an urgent security advisory regarding a vulnerability (CVE-2024-3902) discovered in its uberAgent software
Security researchers have uncovered a critical vulnerability (CVE-2024-2796) within the Perforce Akana Community Manager Developer Portal
Pupy RAT has been actively involved in cyberattacks across Asia, with notable activities in Taiwan, Hong Kong, Singapore, Japan
Laravel Framework Hit by Data Exposure Vulnerability (CVE-2024-29291) – Database Credentials at Risk
CVE-2024-29291 affects versions 8.* through 11.* of Laravel and has the potential to expose sensitive database login credentials.
The primary target of this malware seems to be users of the popular communication platform Discord. The code is particularly adept
TransparentTribe is primarily known for targeting entities in India and Afghanistan, although their activities have spanned across continents
Cyberattacks are constantly evolving, a newly discovered backdoor named "MadMxShell" poses a unique threat to IT security
A detailed analysis by the Splunk Threat Research Team reveals a multi-pronged attack and the use of a new backdoor malware called ‘WINELOADER’
A discovered flaw in the GNU C Library's (glibc) iconv function (CVE-2024-2961) carries severe implications for web applications built on PHP
Exploit code is now available for a critical vulnerability (CVE-2024-29204, CVSS 9.8) that has been identified in Ivanti Avalanche
Cisco customers are facing an increased risk of attack as publicly accessible exploit code has emerged for CVE-2024-20356