Latest news
Stagg explains that the CVE-2024-0333 vulnerability stemmed from a peculiarity in how Chrome handles CRX files
CVE-2023-50969 (CVSS 9.8), could allow attackers to bypass security rules designed to prevent common web attacks like SQL injection and XSS
Security researchers at Fox-IT have uncovered a significantly enhanced version of the Vultur Android banking malware.
The CVE-2024-1212, vulnerability allows for unauthenticated command injection, potentially giving attackers full control of affected systems
CRIL have exposed a worrying nexus between recent Solana wallet draining attacks and the notorious MS Drainer malware
The CVE-2024-0980 (CVSS 7.1) vulnerability stems from flaws in the auto-update service of Okta Verify for Windows
PyPi, a vital repository for open-source software, has taken the drastic step of temporarily halting new user registrations and project creation
Security researchers at Kaspersky Labs have uncovered a dangerous new variant of the DinodasRAT malware that targets Linux operating systems
CVE-2023-6371: "High" Severity XSS in Wiki Pages: This vulnerability could allow an attacker to inject malicious code into Wiki pages
Synology has released a critical security advisory detailing multiple vulnerabilities in their Surveillance Station software
A new report from EclecticIQ analysts has uncovered a sophisticated cyber espionage campaign dubbed "Operation FlightNight"
Security researchers have uncovered a critical vulnerability (CVE-2024-28872) in Stork, a popular open-source network monitoring tool
CVE-2024-1313 exposes a vulnerability in Grafana, allowing any user, even those outside the snapshot owner's organization
CVE-2024-28085: Critical ‘WallEscape’ Flaw Discovered in Linux Utilities Package – Passwords at Risk
A serious security vulnerability, dubbed "WallEscape" (CVE-2024-28085), has been uncovered in the essential Linux system utilities package
Once WarzoneRAT has infiltrated a system, it employs a sophisticated arsenal of tools to gain a foothold and evade detection
Security researchers at SonicWall Capture Labs have discovered a cunning new Trojan written in the Golang programming language
In a shift of tactics that demonstrates their adaptability, Stately Taurus dispatched another malicious package, "Note PSO.scr," on March 5
CVE-2023-24955 has joined CISA's Known Exploited Vulnerabilities catalog, signaling both the severity & increased risk of widespread attacks
CVE-2024-2883: "Use-after-free" vulnerabilities can potentially allow attackers to execute malicious code on a compromised system
The technical details and proof-of-concept (PoC) exploit code for a severe vulnerability in the Linux kernel (CVE-2024-1086) has been exposed
Researchers at Lumen Technologies' Black Lotus Labs have uncovered a newly updated version of the "TheMoon" malware
The Mispadu banking trojan, infamous for its attacks on Latin American countries, is aggressively broadening its targets