Do Son
Cyfirma’s latest malware analysis has revealed a highly sophisticated Android banking trojan dubbed Android/BankBot-YNRK, which is actively...
Latest news
The Cybereason Security Services Team has exposed a stealthy, financially motivated campaign dubbed “Tangerine Turkey,” which uses...
Perplexity AI, the AI-powered search engine, recently announced a multi-year licensing partnership with the world-renowned image provider...
Elastic Patches High-Severity Privilege Escalation Flaw in Elastic Cloud Enterprise (CVE-2025-37736)
Elastic Patches High-Severity Privilege Escalation Flaw in Elastic Cloud Enterprise (CVE-2025-37736)
Elastic has issued a security advisory addressing a high-severity vulnerability (CVE-2025-37736, CVSS 8.8) in Elastic Cloud Enterprise...
Conti Ransomware Operator Oleksii Lytvynenko Extradited from Ireland to Face Federal Hacking Charges
Conti Ransomware Operator Oleksii Lytvynenko Extradited from Ireland to Face Federal Hacking Charges
The U.S. Department of Justice announced that Oleksii Oleksiyovych Lytvynenko, a 43-year-old Ukrainian national residing in Cork,...
Researchers at Cyble Research and Intelligence Labs (CRIL) have identified a sophisticated malware campaign that leverages weaponized...
Pinterest recently announced the introduction of a new AI-powered search and recommendation tool called “Pinterest Assistant.” By...
Microsoft recently announced the official rollout of its “Mixed Reality Link” feature for Windows 11, now available...
Apple has announced its financial results for the fourth quarter of fiscal year 2025, ending on September...
An extremely severe security vulnerability has been discovered and is being actively exploited in the Jobmonster –...
The timing of the artifacts associated with this campaign suggests that Starry Addax may be ramping up its operations.
CVE-2024-26234 status updated: Microsoft confirms active exploitation and public disclosure of the vulnerability.
They're using malicious ads disguised as legitimate software downloads on Google Search to infect the computers of unsuspecting system administrators
Spectre v2, an infamous name that echoes through the corridors of cybersecurity history, has found a new form in CVE-2024-2201
The infamous "Muddled Libra" hacking group is setting its sights on a new frontier: the cloud and Software-as-a-Service (SaaS)
a security researcher from the Zero Day Initiative (ZDI) has uncovered evidence of CVE-2024-29988 being exploited in the wild
CVE-2023-45590 - A "code injection" flaw in FortiClient Linux could allow an attacker to trick a user into visiting a malicious website
The flaw, tracked as CVE-2024-24576, could potentially be exploited by attackers to gain unauthorized control of a system.
CVE-2024-0259 allows low-privileged users to gain elevated privileges, potentially granting them full control over affected systems
The attackers used a malware strain dubbed LazyStealer to pilfer login credentials, demonstrating that even unsophisticated tools
For online businesses operating on a global scale, effective cyber security has been a top priority for...
CVE-2023-48788, a vulnerability within the Fortinet FortiClient EMS, a security management solution pivotal
Threat actors deploy malware to hijack legitimate systems, turning them into unwilling participants in the scanning of networks for vulnerabilities
Threat actors behind this operation are strategically leveraging the ScrubCrypt tool, notorious for its antivirus evasion capabilities
A newly uncovered path traversal vulnerability in the Java-based deployments of several CData business integration products
A sophisticated campaign spearheaded by MuddyWater, an entity known for its state-sponsored activities, unveiling the DarkBeatC2 framework
An orchestrated phishing scheme has surfaced, exploiting the illusion of suspended web pages to deliver a nasty payload of malware
In a disturbing trend uncovered by Bitdefender Labs, malicious actors are weaponizing the growing fascination with AI to spread sophisticated malware
In a joint report by Proofpoint's Threat Research team and Team Cymru, a potent new malware dubbed "Latrodectus" has been exposed
Before its recent activities in the APAC and MENA regions, JSOutProx had been implicated in targeted attacks against Indian Cooperative Banks
This flaw, designated CVE-2023-3454 (CVSS 8.6), could allow malicious actors to remotely execute code on affected switches
Dell has released a critical security patch addressing a severe vulnerability (CVE-2024-0172) in the BIOS software used on a wide range