Do Son
Google has recently introduced a powerful new feature for Canvas, the free interactive workspace built into its...
Latest news
According to reports, as processor performance continues to advance, Apple is planning to integrate the vapor chamber...
Amazon recently unveiled two cutting-edge innovations designed for its operations network—the “Blue Jay” multi-arm robotic collaboration system...
In his latest Power On newsletter, Bloomberg journalist Mark Gurman revealed that Apple’s plans to expand its...
The European Commission has formally accused Meta (parent company of Facebook and Instagram) and TikTok of violating...
Following the release of AI-driven browsers such as Perplexity’s Comet and OpenAI’s ChatGPT Atlas, integrating artificial intelligence...
Anthropic has recently announced a major expansion of its strategic partnership with Google Cloud, sealed through a...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert for two high-severity vulnerabilities affecting the...
NetSupport RAT Campaign Abuses ClickFix to Infect Hosts; 3 Threat Clusters Use RMM for Covert Access
NetSupport RAT Campaign Abuses ClickFix to Infect Hosts; 3 Threat Clusters Use RMM for Covert Access
eSentire’s Threat Response Unit (TRU) has exposed a major wave of malicious campaigns abusing the NetSupport Manager...
Dell Technologies has issued a critical security advisory addressing multiple high-severity vulnerabilities in its Storage Center and...
CVE-2023-41313 allows attackers to exploit weaknesses in the authentication process within Apache Doris using a timing attack
One such group, known as UAC-0050 or "The DaVinci Group," has emerged as a key player in the ongoing conflict between Russia and Ukraine
The company's investigation revealed three previously unknown vulnerabilities in popular tools used for font processing and manipulation
Muddled Libra threat group initially focused on organizations within the software automation, outsourcing, and telecommunications sectors
Using info mined from the stolen data, Midnight Blizzard gained access to Microsoft's internal systems, including sensitive source code
Canon has released a security bulletin addressing a buffer overflow vulnerability (CVE-2024-2184, CVSS 9.8) in their WSD protocol process
CVE-2024-21899 (CVSS 9.8): An authentication bypass vulnerability that could allow unauthorized remote access to the NAS device
Magnet Goblin is a financially motivated threat actor demonstrating proficiency in swiftly exploiting 1-day software vulnerabilities
Hong Kong is facing an increasingly complex phishing threat landscape. Hackers are employing sophisticated techniques to impersonate banks
The Balada Injector campaign, a sophisticated malware operation, has set its sights on exploiting a vulnerability within the WordPress plugin
Kontrol and Elock locks, both utilizing firmware from the company Sciener, have been found riddled with security vulnerabilities
While India faces a surge in these pig-butchering scams, the phenomenon is not confined by geography. Similar tactics have been deployed in Taiwan
NarniaRAT boasts information-stealing capabilities and swiftly conscripts the compromised machine into the Fenix Botnet.
CVE-2023-42662: Exposure of Access Tokens (CVSS 9.3) Rated critical, this flaw compromises Artifactory's Single Sign-On (SSO) feature
CVE-2024-2044 in pgAdmin 4 could have allowed a remote, authenticated attacker to execute arbitrary code on affected systems
A severe security vulnerability (CVE-2024-28222) has been uncovered in Veritas NetBackup, the widely used enterprise backup solution
The fallout from the devastating hacker attack on IT provider Xplain continues as the NCSC publishes a detailed report on the leaked data
A flaw (CVE-2024-27295) was found in Directus, a versatile open-source content management platform favored by developers
Copybara campaign unfolds in a series of meticulously executed stages. TAs are weaponizing a combination of social engineering, phishing infrastructure
Akamai offers a proof-of-concept (PoC) Theme file and video, aiding in understanding and replicating the CVE-2024-21320 vulnerability.
Attackers are becoming increasingly adept at weaponizing trusted resources and services, as seen in a recent Python-based infostealer campaign
A vulnerability (CVE-2024-25111, CVSS 8.6) has been uncovered that could allow malicious actors to cripple Squid-powered systems