Latest news
Security researchers at SonicWall Capture Labs have uncovered a dangerous new variant of the WhiteSnake information stealer
malicious Android apps are disguising themselves as beloved gaming titles to sneak onto your device and unleash a torrent of intrusive advertisements
Netskope Threat Labs has uncovered a sneaky malware campaign misusing a popular Google service to deliver the infamous Azorult infostealer
A serious vulnerability (CVE-2024-1753) has been discovered in the popular containerization tools Podman and Buildah
The core issue within CVE-2024-22257 lies in the way Spring Security handles authentication checks when its AuthenticatedVoter
PixPirate departs from the traditional method of malware hiding by removing the application icon via the SetComponentEnabledSetting API
The Earth Krahang threat actor uses a combination of brute-force attacks and custom scripts to breach email servers and steal sensitive data.
CVE-2024-28353 and CVE-2024-28354 leave these routers alarmingly exposed to potential remote takeover by cyberattackers
Fujitsu, the Japanese multinational technology giant, has revealed a data breach resulting from a malware infection within its corporate network
These patches address two flaws (CVE-2024-23138 & CVE-2024-23139) that could have severe consequences for users of affected software versions
The report from F-Secure on the βfree wedding inviteβ scam is a stark reminder of the ever-evolving landscape of cyber threats
This new loader isn't limited to SPARKRAT; they've found versions containing Cobalt Strike β a penetration testing framework often misused by hackers
AutoSmuggle represents a pivotal development in the malware delivery arena. By embedding executable or archive files within SVG or HTML files
BlueSpy exploit highlights how the widespread use of insecure pairing methods in consumer Bluetooth headsets poses a significant privacy risk
Mitel has issued a critical security patch to address a vulnerability (CVE-2024-28815) in its InAttend and CMG products
CVE-2024-23334 in the popular Python web framework aiohttp has swiftly landed on the radar of notorious ransomware operators, ShadowSyndicate
CVE-2024-27307 poses a serious security risk & could allow attackers to remotely execute malicious code within apps that rely on the library
Apache ZooKeeper, a widely used coordination service for distributed applications, has a serious security flaw, tracked as CVE-2024-23944
Phoenix Contact has issued an urgent security alert regarding multiple critical vulnerabilities discovered within the firmware of CHARX SEC
A Server-Side Request Forgery (SSRF) vulnerability, tracked as CVE-2024-28752, has been discovered in versions before 4.0.4, 3.6.3, and 3.5.8
ELVIA INFOTECH operate a 'Malware-as-a-Service' (MaaS) model, essentially providing ready-made phishing scams and malware to criminals