Do Son
The North Korean APT group BlueNoroff — also known as Sapphire Sleet, APT38, Alluring Pisces, Stardust Chollima,...
Latest news
Security researcher Gabriele Digregorio has disclosed a newly identified vulnerability in Google Messages for Wear OS, designated...
The Akamai Security Intelligence Group has issued an urgent warning after observing active exploitation in the wild...
Researchers at the AhnLab Security Intelligence Center (ASEC) have released an in-depth analysis of the Beast ransomware...
A newly disclosed vulnerability, CVE-2025-61481, rated a maximum CVSS score of 10.0, affects MikroTik RouterOS (v7.14.2) and...
Researchers from Trend Research have identified a major evolution in the Water Saci malware campaign, marking one...
Researchers at the AhnLab Security Intelligence Center (ASEC) have uncovered a new malware campaign in which the...
Earlier, Microsoft released a security update to address a critical vulnerability in ASP.NET, identified as CVE-2025-55315 with...
Microsoft’s collaborative workspace platform Microsoft Teams, widely used by enterprises and professional teams, is set to receive...
Elon Musk’s artificial intelligence company xAI has recently unveiled Grokipedia, a new encyclopedia platform built upon its...
A wave of cyberattacks is crashing down on organizations using the TeamCity CI/CD platform, exploiting recently disclosed vulnerabilities
In the complex tapestry of the business world, networking stands out as a crucial thread that connects...
Researcher published the technical details & PoC exploit for a severe flaw in Progress Kemp LoadMaster load balancers (CVE-2024-1212, CVSS 10)
CVE-2024-2615 is classified as critical & allows attackers to potentially run malicious code on your computer without your knowledge or interaction
SCPC SSSCIP reports a relentless wave of assaults using the Smoke Loader backdoor. UAC-0006 is the primary financial cybercrime threat the country faces
AndroxGh0st, a sophisticated Python-based malware that exploits vulnerabilities within Laravel applications, extracting sensitive information
a popular choice for automating content imports on WordPress websites, contains two dangerous flaws (CVE-2024-27956 and CVE-2024-27954)
Proof-of-concept (PoC) code is now available for a critical severity vulnerability (CVE-2024-21762) in FortiOS SSL VPN
Security researchers at SonicWall Capture Labs have uncovered a dangerous new variant of the WhiteSnake information stealer
malicious Android apps are disguising themselves as beloved gaming titles to sneak onto your device and unleash a torrent of intrusive advertisements
Netskope Threat Labs has uncovered a sneaky malware campaign misusing a popular Google service to deliver the infamous Azorult infostealer
A serious vulnerability (CVE-2024-1753) has been discovered in the popular containerization tools Podman and Buildah
The core issue within CVE-2024-22257 lies in the way Spring Security handles authentication checks when its AuthenticatedVoter
PixPirate departs from the traditional method of malware hiding by removing the application icon via the SetComponentEnabledSetting API
The Earth Krahang threat actor uses a combination of brute-force attacks and custom scripts to breach email servers and steal sensitive data.
CVE-2024-28353 and CVE-2024-28354 leave these routers alarmingly exposed to potential remote takeover by cyberattackers
Fujitsu, the Japanese multinational technology giant, has revealed a data breach resulting from a malware infection within its corporate network
These patches address two flaws (CVE-2024-23138 & CVE-2024-23139) that could have severe consequences for users of affected software versions
The report from F-Secure on the “free wedding invite” scam is a stark reminder of the ever-evolving landscape of cyber threats
This new loader isn't limited to SPARKRAT; they've found versions containing Cobalt Strike – a penetration testing framework often misused by hackers
AutoSmuggle represents a pivotal development in the malware delivery arena. By embedding executable or archive files within SVG or HTML files
BlueSpy exploit highlights how the widespread use of insecure pairing methods in consumer Bluetooth headsets poses a significant privacy risk