Do Son
Trellix Advanced Research Center (ARC) has exposed a sophisticated espionage campaign conducted by the SideWinder APT group,...
Latest news
The Apache Software Foundation has released multiple security patches for Apache Tomcat, addressing three newly disclosed vulnerabilities...
Arctic Wolf Labs has uncovered a sophisticated Loader-as-a-Service (LaaS) operation dubbed “Caminho” — a Brazilian-origin malware loader...
CYFIRMA Threat Intelligence has released an in-depth technical report on GhostGrab, a sophisticated Android malware family that...
Netskope Threat Labs has discovered a rapidly spreading Python-based infostealer dubbed RedTiger, which is being repurposed from...
When users subscribe to iCloud, their photo libraries can be automatically uploaded in the background without any...
Microsoft Bing Wallpaper is a desktop application developed by Microsoft, designed around Bing’s Image of the Day...
cybernewswire
London, United Kingdom, 27th October 2025, CyberNewsWire
According to a report by The Information, following its ventures into text, image, and video generation, OpenAI...
Dan Agbo
Sergei Beliachkov, who managed security for 7,000+ users as a virtual CISO and later launched the service...
Disguised as helpful tools to improve game performance, the malware known as "Tweaks" is spreading rapidly through popular platforms
Researchers have uncovered a new security vulnerability dubbed "GhostRace" (CVE-2024-2193) that allows attackers to exploit weaknesses
FakeBat malware is often hidden within seemingly innocuous MSI installers. These installers are laced with heavily obfuscated PowerShell code
Dubbed "BIPClip", this campaign employed seven distinct malicious packages, released in 19 different versions since December 2022
CVE-2024-22039 could allow an unauthenticated remote attacker to execute code on the underlying operating system with root privileges.
One of the most concerning discoveries in this campaign is the deployment of a new Java-based RAT named VCURMS.
CVE-2024-22144 with a "Critical" CVSS score of 9.0, could allow unauthenticated attackers to take complete control of vulnerable websites
CVE-2024-25331 leaves the door wide open for unauthenticated attackers to take full control of affected routers
CVE-2024-22127 (CVSS 9.1), this time discovered in SAP NetWeaver AS Java's Administrator Log Viewer plug-in
Identified as CVE-2024-2194 with a CVSS score of 7.2, this vulnerability is classified as a stored cross-site scripting (XSS) issue
PoC exploit code will be released at "a later date "for a high-severity CVE-2024-21378 flaw allowing RCE in Microsoft Outlook
Security researchers have exposed a crafty attack campaign manipulating a decentralized content delivery network (CDN)
Attackers are tricking users into downloading a dangerous infostealer disguised as a legitimate Adobe Reader installation file
A flaw (CVE-2024-2370, CVSS 9.8) has been discovered in older versions of ManageEngine Desktop Central, developed by Zoho Corporation
A dangerous new malware named Planet Stealer is making its rounds in the cybercriminal underworld, and security experts warn
In an era where digital transactions are commonplace, the threat of financial malware has surged, posing significant...
Security researchers at GuidePoint have uncovered a new weapon in the BianLian ransomware gang’s arsenal – a...
The vulnerability, designated as CVE-2024-22252, could potentially allow attackers to execute malicious code on affected systems.
CVE-2024-22857 is a heap-based buffer overflow that could allow attackers to remotely execute arbitrary code on systems
The payload delivered through this elaborate ruse is a Lua JIT malware, comprising a compiled LuaJIT executable and a batch script
Security researchers at QiAnXin Threat Intelligence Center have uncovered a sophisticated malware campaign waged by the Kimsuky APT group
ASEC have uncovered a disturbing malware campaign that's cleverly disguised as a legitimate installer for the popular Notion software