Do Son
A new ransomware family called Midnight has emerged, borrowing heavily from the Babuk ransomware framework — but...
Latest news
The HelixGuard Threat Intelligence Team has uncovered a widespread supply chain compromise affecting the Visual Studio Code...
Google has announced that starting with Chrome 154, releasing in October 2026, the browser will automatically enable...
Researchers from Exodus Intelligence, led by Michele Campa, have disclosed a privilege-escalation vulnerability in Microsoft’s Cloud Files...
Researchers at BitSight have uncovered a long-running spam campaign operated by a Brazilian threat group behind the...
cybernewswire
Tel Aviv, Israel, 29th October 2025, CyberNewsWire
A security flaw has been discovered in the LiteSpeed Cache for WordPress (LSCWP) plugin, one of the...
The strongSwan Team has disclosed a critical heap-based buffer overflow vulnerability (CVE-2025-62291) in the EAP-MSCHAPv2 plugin used...
The Cybersecurity and Infrastructure Security Agency (CISA) has added two critical Dassault Systèmes DELMIA Apriso vulnerabilities to...
IBM has issued a critical security advisory warning customers of a high-severity vulnerability (CVE-2025-36386, CVSS 9.8) in...
CVE-2024-28085: Critical ‘WallEscape’ Flaw Discovered in Linux Utilities Package – Passwords at Risk
CVE-2024-28085: Critical ‘WallEscape’ Flaw Discovered in Linux Utilities Package – Passwords at Risk
A serious security vulnerability, dubbed "WallEscape" (CVE-2024-28085), has been uncovered in the essential Linux system utilities package
Once WarzoneRAT has infiltrated a system, it employs a sophisticated arsenal of tools to gain a foothold and evade detection
Security researchers at SonicWall Capture Labs have discovered a cunning new Trojan written in the Golang programming language
In a shift of tactics that demonstrates their adaptability, Stately Taurus dispatched another malicious package, "Note PSO.scr," on March 5
CVE-2023-24955 has joined CISA's Known Exploited Vulnerabilities catalog, signaling both the severity & increased risk of widespread attacks
CVE-2024-2883: "Use-after-free" vulnerabilities can potentially allow attackers to execute malicious code on a compromised system
The technical details and proof-of-concept (PoC) exploit code for a severe vulnerability in the Linux kernel (CVE-2024-1086) has been exposed
Researchers at Lumen Technologies' Black Lotus Labs have uncovered a newly updated version of the "TheMoon" malware
The Mispadu banking trojan, infamous for its attacks on Latin American countries, is aggressively broadening its targets
Industrial Espionage: The most alarming scenario is a targeted attack designed to steal sensitive data (credentials, design plans, etc.)
This vulnerability (CVE-2024-1933) affects TeamViewer Client for macOS versions earlier than 15.52.
A newly discovered malware loader is making waves in the cybercrime world, helping the notorious Agent Tesla infostealer expand its reach
Designated CVE-2024-27981, the vulnerability carries a "Critical" CVSS rating of 9.1 out of 10. It exists in self-hosted Linux installations
Security researcher Yann Gascuel has detailed a critical privilege escalation vulnerability (CVE-2023-42931) affecting the macOS versions
A serious security vulnerability (CVE-2024-1538, CVSS 8.8) has been discovered in the File Manager plugin for WordPress
GEOBOX system is designed for simplicity. With a user manual providing step-by-step instructions, even those with limited technical
Security researcher ma4ter has revealed details of a dangerous security vulnerability (CVE-2024-20767) in Adobe ColdFusion
over 170,000 Python developers have fallen victim to a sophisticated malware scheme designed to steal sensitive data
CVE-2024-29937 in Network File System (NFS) implementations used by popular BSD-derived operating systems, including OpenBSD and FreeBSD
GoFetch attack leverages a new type of chosen-input attack, ingeniously using DMP behavior to extract keys from cryptographic algorithms
OpenVPN has released critical security updates (version 2.6.10) to address a series of vulnerabilities in its Windows software
threat actors exploit malvertising and a custom malware loader built in Go to deliver the notorious Rhadamanthys information stealer.