Latest news
Cyber-Enabled Cargo Theft: Hackers Hijack Logistics Firms with RMM Tools to Steal Physical Shipments
Security researchers from G DATA have analyzed "Sharp Stealer," a malware family that steals login credentials, payment information
This zero-day flaw, identified as CVE-2024-4040 with a CVSS score of 7.7, poses a severe risk to organizations
A new report from Kaspersky Labs reveals a sophisticated toolkit used by the advanced persistent threat (APT) group, "ToddyCat,"
Naor Hodorov has made public a proof-of-concept (PoC) exploit for a severe vulnerability (CVE-2024-21111) in Oracle VirtualBox
Citrix has released an urgent security advisory regarding a vulnerability (CVE-2024-3902) discovered in its uberAgent software
Security researchers have uncovered a critical vulnerability (CVE-2024-2796) within the Perforce Akana Community Manager Developer Portal
Pupy RAT has been actively involved in cyberattacks across Asia, with notable activities in Taiwan, Hong Kong, Singapore, Japan
Laravel Framework Hit by Data Exposure Vulnerability (CVE-2024-29291) – Database Credentials at Risk
CVE-2024-29291 affects versions 8.* through 11.* of Laravel and has the potential to expose sensitive database login credentials.
The primary target of this malware seems to be users of the popular communication platform Discord. The code is particularly adept
TransparentTribe is primarily known for targeting entities in India and Afghanistan, although their activities have spanned across continents
Cyberattacks are constantly evolving, a newly discovered backdoor named "MadMxShell" poses a unique threat to IT security
A detailed analysis by the Splunk Threat Research Team reveals a multi-pronged attack and the use of a new backdoor malware called ‘WINELOADER’
A discovered flaw in the GNU C Library's (glibc) iconv function (CVE-2024-2961) carries severe implications for web applications built on PHP
Exploit code is now available for a critical vulnerability (CVE-2024-29204, CVSS 9.8) that has been identified in Ivanti Avalanche
Cisco customers are facing an increased risk of attack as publicly accessible exploit code has emerged for CVE-2024-20356
CVE-2024-20380 could allow unauthenticated, remote attackers to crash ClamAV services, causing a Denial-of-Service (DoS) condition.
A detailed analysis by Sucuri has uncovered a sophisticated malware campaign that has shifted strategies to become more elusive and harder to detect
A recent security advisory has shed light on a vulnerability (CVE-2024-32462) within Flatpak, a popular framework for packaging
The DuneQuixote campaign, active since at least February 2023, utilizes a custom malware known as "CR4T" alongside droppers
GhostLocker 2.0 builds upon the original version, demonstrating the active development and sophistication of this threat
Keycloak, a widely used open-source solution for authentication and authorization, has released important security updates addressing multiple flaws
Further complicating the malware's capabilities was the introduction of the previously undocumented Kaolin RAT.