Do Son
Researchers at Arctic Wolf Labs have uncovered an extensive cyber espionage campaign by UNC6384, a Chinese-affiliated threat...
Latest news
In a recent blog post, Google revealed that “in the last 12 months, fraudsters have used advanced...
Researchers at Gen Threat Labs have identified two new toolsets in active use by North Korean state-sponsored...
The AhnLab Security Intelligence Center (ASEC) has confirmed that the Kinsing threat actor — also known as...
Silent Push Threat Analysts have uncovered growing evidence that AdaptixC2, a legitimate open-source post-exploitation framework designed for...
Cyfirma’s latest malware analysis has revealed a highly sophisticated Android banking trojan dubbed Android/BankBot-YNRK, which is actively...
The Cybereason Security Services Team has exposed a stealthy, financially motivated campaign dubbed “Tangerine Turkey,” which uses...
Perplexity AI, the AI-powered search engine, recently announced a multi-year licensing partnership with the world-renowned image provider...
Elastic Patches High-Severity Privilege Escalation Flaw in Elastic Cloud Enterprise (CVE-2025-37736)
Elastic Patches High-Severity Privilege Escalation Flaw in Elastic Cloud Enterprise (CVE-2025-37736)
Elastic has issued a security advisory addressing a high-severity vulnerability (CVE-2025-37736, CVSS 8.8) in Elastic Cloud Enterprise...
Conti Ransomware Operator Oleksii Lytvynenko Extradited from Ireland to Face Federal Hacking Charges
Conti Ransomware Operator Oleksii Lytvynenko Extradited from Ireland to Face Federal Hacking Charges
The U.S. Department of Justice announced that Oleksii Oleksiyovych Lytvynenko, a 43-year-old Ukrainian national residing in Cork,...
A newly exposed attack campaign, dubbed "Connect:fun," is raising alarms in the media sector, Forescout Research – Vedere Labs warns
A serious security vulnerability (CVE-2024-32019) has been discovered in Netdata, a widely used open-source monitoring and troubleshooting tool
The CVE-2024-3652 vulnerability lies in Libreswan's handling of IKEv1 connections when certain default settings are in place.
A severe security flaw (CVE-2024-31497) has been discovered in the popular SSH client PuTTY (versions 0.68 to 0.80)
A sophisticated and coordinated cyber phishing campaign has been targeting major financial institutions across Southeast Asia
CVE-2024-2876 (CVSS score of 9.8) allows unauthenticated attackers to inject malicious code into WordPress sites using the plugin
Trust management is a service provided by financial institutions or management companies in the stock, commodity and...
This pervasive campaign, aptly named "SteganoAmor" due to its use of steganography—a method of hiding malware within innocuous-looking files
CVE-2024-1874 (Critical): Improper command-line handling on Windows systems could allow attackers to inject arbitrary commands
Even without the final payload, WikiLoader poses a significant risk by meticulously gathering information about the infected system
The resurgence of the LightSpy mobile spyware campaign poses a renewed and alarming threat to individuals and organizations
Streaming giant Roku has publicly acknowledged a second data breach incident impacting approximately 576,000 user accounts
Akamai researcher Ben Barnea has released the technical details and PoC for a severe CVE-2023-35628 vulnerability in Microsoft Windows
Security researchers at Redline Cyber Security have revealed a severe security flaw (CVE-2024-22734) within Trux
CVE-2024-22262 in the widely-used Spring Framework software could leave countless applications vulnerable to redirect and SSRF attacks
A potent new banking trojan dubbed "Coyote" is sweeping through Brazil's financial sector, prompting urgent warnings
Palo Alto Networks has disclosed a severe zero-day vulnerability (CVE-2024-3400) affecting its market-leading firewall software, PAN-OS
CVE-2024-27309 could allow unauthorized access to sensitive data during the process of migrating a Kafka cluster from ZooKeeper mode to KRaft mode
Bitdefender has released critical updates to address multiple vulnerabilities in its GravityZone and Endpoint Security products
The main component of this multi-stage attack is the FatalRAT malware. This grants the attackers remote control over a victim's computer
Security researchers have even developed tools, like a Metasploit module and a Python exploit script, specifically tailored to CVE-2024-31819
Apple has sent warnings to a growing number of users, alerting them about highly sophisticated mercenary spyware attacks