Do Son
According to a report by The Wall Street Journal, Elon Musk’s SpaceX is expected to secure a...
Latest news
According to Bloomberg journalist Mark Gurman in his latest Power On newsletter, Apple retail employees have been...
Researchers at SEQRITE Labs have uncovered a stealthy cyber espionage campaign dubbed “Operation SkyCloak”, which has been...
Fortinet’s FortiGuard Labs has identified a widespread cloud abuse campaign, dubbed “TruffleNet,” that leverages stolen AWS credentials...
Tap-and-Steal: Over 760 Android Apps Exploit NFC/HCE for Payment Card Theft in Global Financial Scam
Tap-and-Steal: Over 760 Android Apps Exploit NFC/HCE for Payment Card Theft in Global Financial Scam
Researchers from Zimperium zLabs have uncovered a rapidly growing cybercrime trend involving Android applications that abuse NFC...
Researchers at Arctic Wolf Labs have uncovered an extensive cyber espionage campaign by UNC6384, a Chinese-affiliated threat...
In a recent blog post, Google revealed that “in the last 12 months, fraudsters have used advanced...
Researchers at Gen Threat Labs have identified two new toolsets in active use by North Korean state-sponsored...
The AhnLab Security Intelligence Center (ASEC) has confirmed that the Kinsing threat actor — also known as...
Silent Push Threat Analysts have uncovered growing evidence that AdaptixC2, a legitimate open-source post-exploitation framework designed for...
This pervasive campaign, aptly named "SteganoAmor" due to its use of steganography—a method of hiding malware within innocuous-looking files
CVE-2024-1874 (Critical): Improper command-line handling on Windows systems could allow attackers to inject arbitrary commands
Even without the final payload, WikiLoader poses a significant risk by meticulously gathering information about the infected system
The resurgence of the LightSpy mobile spyware campaign poses a renewed and alarming threat to individuals and organizations
Streaming giant Roku has publicly acknowledged a second data breach incident impacting approximately 576,000 user accounts
Akamai researcher Ben Barnea has released the technical details and PoC for a severe CVE-2023-35628 vulnerability in Microsoft Windows
Security researchers at Redline Cyber Security have revealed a severe security flaw (CVE-2024-22734) within Trux
CVE-2024-22262 in the widely-used Spring Framework software could leave countless applications vulnerable to redirect and SSRF attacks
A potent new banking trojan dubbed "Coyote" is sweeping through Brazil's financial sector, prompting urgent warnings
Palo Alto Networks has disclosed a severe zero-day vulnerability (CVE-2024-3400) affecting its market-leading firewall software, PAN-OS
CVE-2024-27309 could allow unauthorized access to sensitive data during the process of migrating a Kafka cluster from ZooKeeper mode to KRaft mode
Bitdefender has released critical updates to address multiple vulnerabilities in its GravityZone and Endpoint Security products
The main component of this multi-stage attack is the FatalRAT malware. This grants the attackers remote control over a victim's computer
Security researchers have even developed tools, like a Metasploit module and a Python exploit script, specifically tailored to CVE-2024-31819
Apple has sent warnings to a growing number of users, alerting them about highly sophisticated mercenary spyware attacks
Cybercriminals, demonstrating both ingenuity and malice, have initiated a campaign that manipulates GitHub's search functionality to distribute malware
The cornerstone of this campaign is the deployment of Rhadamanthys, an information-stealing malware previously unseen in TA547's arsenal
CVE-2024-27980: Successful exploitation could give attackers the ability to remotely run arbitrary commands on a vulnerable system.
Dubbed CVE-2024-3092, this high-severity Stored XSS issue was promptly neutralized in the latest GitLab release.
Identified as CVE-2024-31861, this flaw gives attackers a way to inject malicious code through Zeppelin's Shell interpreter
Threat actors are compromising these popular data stores to install the potent Metasploit Meterpreter backdoor.
The popular Content Management System (CMS) WordPress has released a critical security update, addressing a XSS vulnerability