Latest news
This critical vulnerability (CVE-2024-28890) allows attackers to upload malicious files of dangerous types to a vulnerable website
Security researchers have uncovered a persistent, multi-component virus known as OfflRouter that has been quietly infecting Ukrainian systems
The attack typically begins with cybercriminals scanning for internet-exposed Kubernetes workloads running vulnerable OpenMetadata instances
HashiCorp has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-3817) within its widely used go-getter library
Researchers have uncovered a dangerous new variant of the Redline Stealer malware that uses clever obfuscation tactics
PSIRT has confirmed that proof-of-concept exploit code exists for the IMC command injection vulnerability (CVE-2024-20295
SoumniBot malware is notable for its employment of unconventional obfuscation techniques centered on manipulating the Android manifest file
Cybersecurity researchers are tracking a significant escalation in activity from the GOLD IONIC ransomware group
Mamont malware, currently targeting Russian-speaking individuals, masquerades as a fake Google Chrome app to trick unsuspecting users
the cybersecurity landscape faces a formidable threat in the form of "Mobile NotPetya," a potential zero-click, wormable mobile malware
This vulnerability, found in the TP-Link Archer AX21's web management interface, allows hackers to inject malicious code without needing the router's password
The Evil Ant ransomware, written in Python and compiled using PyInstaller, targets a wide array of files in a victim's folders
To increase their attacks' success rate, TA427 often impersonates respected members of the foreign policy community.
A new report by cybersecurity firm Resecurity highlights a marked increase in misinformation campaigns and hacktivist activity targeting the Philippines
Security researchers published the technical details and PoC exploit code for a dangerous zero-day CVE-2024-21338 vulnerability
A newly exposed attack campaign, dubbed "Connect:fun," is raising alarms in the media sector, Forescout Research – Vedere Labs warns
A serious security vulnerability (CVE-2024-32019) has been discovered in Netdata, a widely used open-source monitoring and troubleshooting tool
The CVE-2024-3652 vulnerability lies in Libreswan's handling of IKEv1 connections when certain default settings are in place.
A severe security flaw (CVE-2024-31497) has been discovered in the popular SSH client PuTTY (versions 0.68 to 0.80)
A sophisticated and coordinated cyber phishing campaign has been targeting major financial institutions across Southeast Asia
CVE-2024-2876 (CVSS score of 9.8) allows unauthenticated attackers to inject malicious code into WordPress sites using the plugin