Do Son
A critical security vulnerability has been identified and is being actively exploited in the King Addons for...
Latest news
The Post SMTP plugin, used by over 400,000 WordPress sites to ensure reliable email delivery, has been...
A sophisticated campaign executed by the Chinese state-sponsored threat group BRONZE BUTLER (also known as Tick) has...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two new flaws—CVE-2025-24893 in XWiki Platform and...
During a recent public appearance, Netflix Chief Technology Officer Elizabeth Stone revealed that the company is actively...
Google’s Chromium, developed by Google, forms the foundation of many modern browsers — yet researchers have uncovered...
Samsung has officially announced the launch of its Samsung Internet web browser for Windows 10 and Windows...
Both Apple’s App Store and Google’s Play Store currently prohibit developers from directing users to make payments...
The DNN Platform, a leading open-source Content Management System (CMS) in the Microsoft ecosystem, is urging its...
The Wordfence Threat Intelligence Team has uncovered a highly sophisticated malware campaign targeting WordPress e-commerce sites using...
Attackers are ruthlessly exploiting a recently patched critical vulnerability (CVE-2024-20720) in Magento. They're injecting malicious
CVE-2024-29863 could allow a malicious user with existing access to a Windows system running QlikView to escalate their privileges to the Administrator level
CVE-2024-3116 allows attackers to execute malicious code on servers running pgAdmin, potentially compromising the entire database system.
Researchers have uncovered a sophisticated cybercrime operation dubbed "CoralRaider," pinpointing the threat actors as likely based in Vietnam
Researchers have uncovered the inner workings of Byakugan, a versatile malware strain employing a mix of legitimate and malicious components
A vulnerability (CVE-2024-31498) with a CVSS score of 7.7 was discovered, allowing attackers to exploit elevated privileges on Windows systems
Binary Defense has dissected a recent QakBot campaign, revealing new anti-analysis tricks and an innovative persistence mechanism.
The critical severity of CVE-2024-29008 highlights the risk of potential infrastructure takeover if left unpatched.
the malicious installer injects the SecTopRAT malware into MSBuild.exe, a component of the Microsoft development framework
attacks exploiting unpatched vulnerabilities result in significantly more severe outcomes than those leveraging compromised credentials
Security researchers have uncovered three vulnerabilities in the widely used Apache HTTP Server, prompting an urgent call for users
Security researchers have uncovered a serious vulnerability (CVE-2024-3273) in several D-Link Network Attached Storage (NAS) devices
Server Crash Vulnerability (CVE-2024-27983): This high-severity vulnerability resides within Node.js's HTTP/2 server
A recent security advisory from Veridium has exposed a series of significant vulnerabilities in their popular VeridiumID authentication platform
This campaign delivers the Rhadamanthys Stealer, an advanced Malware-as-a-Service (MaaS), through a complex
Ivanti has released an urgent security advisory detailing multiple critical vulnerabilities affecting their popular ICS and Policy Secure gateways
Security researchers at ReversingLabs have uncovered a new threat vector within the popular Visual Studio Code (VS Code) Marketplace
A researcher found multiple high-severity vulnerabilities in the REHub WordPress theme and the associated REHub Framework plugin
The expansion of the fake e-shop campaign to target 18 banks in Malaysia, coupled with its reach into Vietnam and Myanmar
Consulting is a big part of the IT industry, as companies often find themselves in need of...
Two of these vulnerabilities, labeled CVE-2024-29745 and CVE-2024-29748, are already being exploited by bad actors
threat actors are targeting consumer users, particularly younger audiences drawn to popular video games, by promoting cracked software