Do Son
A security flaw has been discovered in the LiteSpeed Cache for WordPress (LSCWP) plugin, one of the...
Latest news
The strongSwan Team has disclosed a critical heap-based buffer overflow vulnerability (CVE-2025-62291) in the EAP-MSCHAPv2 plugin used...
The Cybersecurity and Infrastructure Security Agency (CISA) has added two critical Dassault Systèmes DELMIA Apriso vulnerabilities to...
IBM has issued a critical security advisory warning customers of a high-severity vulnerability (CVE-2025-36386, CVSS 9.8) in...
PayPal, the U.S.-based payments giant, has announced a strategic partnership with OpenAI, adopting the company’s newly introduced...
MediaTek has announced the launch of the Kompanio 540, a processor purpose-built for the education market, promising...
When Microsoft released the Windows 11 24H2 update in 2024, it was rolled out first to Microsoft...
At its Adobe Max 2025 annual creativity conference, Adobe not only unveiled a series of AI-driven innovations...
OpenAI has officially announced the completion of its long-anticipated and closely watched corporate restructuring, marking its transformation...
At the Money20/20 financial conference held in Las Vegas, Jennifer Bailey, Vice President of Apple Pay and...
The vulnerabilities in question, CVE-2024-29944, and CVE-2024-29943, were expertly exploited by researcher Manfred Paul (@_manfp)
Mandiant assesses with moderate confidence that UNC5174 operates as an initial access broker for the Chinese MSS.
A security researcher has published details and proof-of-concept (PoC) code for a Windows CVE-2023-36424 vulnerability
Curious Serpens has long been a harbinger of cyber espionage, with a notorious history of targeting the aerospace and energy sectors for espionage
Given the severity of CVE-2024-27438, Apache Doris users are strongly advised to upgrade to version 2.0.5 or 2.1.x immediately
a new evolution of the notorious Sysrv botnet exhibits sophisticated tactics, including the abuse of a Google subdomain to spread its payload
The malware installs AteraAgent, legitimate remote administration software known to be abused by the TA450 hacking group
PoC code releases for a severe vulnerability (CVE-2023-48788) in the Fortinet FortiClient Enterprise Management Server (EMS)
Unsuspecting users who open these attachments unwittingly unleash the AceCryptor-packed Rescoms RAT onto their systems.
These flaws, tracked as CVE-2024-1147 and CVE-2024-1148, could allow attackers to upload and download sensitive files
The vulnerability, tracked as CVE-2024-2054, could allow unauthenticated attackers to execute malicious code on affected servers.
Security experts have sounded the alarm on a widespread malware campaign employing the notorious StealC Infostealer
A sophisticated new malware campaign dubbed "PhantomBlu" is on the prowl, preying on US-based organizations
A major security flaw (CVE-2024-1800) has been discovered in the Progress Telerik Report Server, a widely used business reporting solution
A wave of cyberattacks is crashing down on organizations using the TeamCity CI/CD platform, exploiting recently disclosed vulnerabilities
In the complex tapestry of the business world, networking stands out as a crucial thread that connects...
Researcher published the technical details & PoC exploit for a severe flaw in Progress Kemp LoadMaster load balancers (CVE-2024-1212, CVSS 10)
CVE-2024-2615 is classified as critical & allows attackers to potentially run malicious code on your computer without your knowledge or interaction
SCPC SSSCIP reports a relentless wave of assaults using the Smoke Loader backdoor. UAC-0006 is the primary financial cybercrime threat the country faces
AndroxGh0st, a sophisticated Python-based malware that exploits vulnerabilities within Laravel applications, extracting sensitive information
a popular choice for automating content imports on WordPress websites, contains two dangerous flaws (CVE-2024-27956 and CVE-2024-27954)
Proof-of-concept (PoC) code is now available for a critical severity vulnerability (CVE-2024-21762) in FortiOS SSL VPN