Do Son
During a recent public appearance, Netflix Chief Technology Officer Elizabeth Stone revealed that the company is actively...
Latest news
Google’s Chromium, developed by Google, forms the foundation of many modern browsers — yet researchers have uncovered...
Samsung has officially announced the launch of its Samsung Internet web browser for Windows 10 and Windows...
Both Apple’s App Store and Google’s Play Store currently prohibit developers from directing users to make payments...
The DNN Platform, a leading open-source Content Management System (CMS) in the Microsoft ecosystem, is urging its...
The Wordfence Threat Intelligence Team has uncovered a highly sophisticated malware campaign targeting WordPress e-commerce sites using...
Koi Security has uncovered a massive supply-chain campaign dubbed PhantomRaven, which has silently infected the npm ecosystem...
Beijing-based XLab has unveiled the discovery of RPX_Client, a previously undocumented module linked to the PolarEdge ORB...
Palo Alto Networks’ Unit 42 Threat Intelligence team has uncovered a sophisticated new malware family dubbed Airstalk,...
The Symantec Threat Hunter Team has uncovered two major cyber intrusions in Ukraine attributed to Russian-aligned threat...
A newly uncovered path traversal vulnerability in the Java-based deployments of several CData business integration products
A sophisticated campaign spearheaded by MuddyWater, an entity known for its state-sponsored activities, unveiling the DarkBeatC2 framework
An orchestrated phishing scheme has surfaced, exploiting the illusion of suspended web pages to deliver a nasty payload of malware
In a disturbing trend uncovered by Bitdefender Labs, malicious actors are weaponizing the growing fascination with AI to spread sophisticated malware
In a joint report by Proofpoint's Threat Research team and Team Cymru, a potent new malware dubbed "Latrodectus" has been exposed
Before its recent activities in the APAC and MENA regions, JSOutProx had been implicated in targeted attacks against Indian Cooperative Banks
This flaw, designated CVE-2023-3454 (CVSS 8.6), could allow malicious actors to remotely execute code on affected switches
Dell has released a critical security patch addressing a severe vulnerability (CVE-2024-0172) in the BIOS software used on a wide range
Attackers are ruthlessly exploiting a recently patched critical vulnerability (CVE-2024-20720) in Magento. They're injecting malicious
CVE-2024-29863 could allow a malicious user with existing access to a Windows system running QlikView to escalate their privileges to the Administrator level
CVE-2024-3116 allows attackers to execute malicious code on servers running pgAdmin, potentially compromising the entire database system.
Researchers have uncovered a sophisticated cybercrime operation dubbed "CoralRaider," pinpointing the threat actors as likely based in Vietnam
Researchers have uncovered the inner workings of Byakugan, a versatile malware strain employing a mix of legitimate and malicious components
A vulnerability (CVE-2024-31498) with a CVSS score of 7.7 was discovered, allowing attackers to exploit elevated privileges on Windows systems
Binary Defense has dissected a recent QakBot campaign, revealing new anti-analysis tricks and an innovative persistence mechanism.
The critical severity of CVE-2024-29008 highlights the risk of potential infrastructure takeover if left unpatched.
the malicious installer injects the SecTopRAT malware into MSBuild.exe, a component of the Microsoft development framework
attacks exploiting unpatched vulnerabilities result in significantly more severe outcomes than those leveraging compromised credentials
Security researchers have uncovered three vulnerabilities in the widely used Apache HTTP Server, prompting an urgent call for users
Security researchers have uncovered a serious vulnerability (CVE-2024-3273) in several D-Link Network Attached Storage (NAS) devices
Server Crash Vulnerability (CVE-2024-27983): This high-severity vulnerability resides within Node.js's HTTP/2 server
A recent security advisory from Veridium has exposed a series of significant vulnerabilities in their popular VeridiumID authentication platform