Do Son
Researchers at Kaspersky uncovered a sophisticated espionage campaign exploiting a zero-day vulnerability in Google Chrome and delivering...
Latest news
Security researchers have disclosed a high-severity vulnerability, tracked as CVE-2025-10680 (CVSS 8.8), affecting OpenVPN 2.7_alpha1 through 2.7_beta1...
Cybersecurity experts at Doctor Web have identified a highly sophisticated Android backdoor hiding in maliciously modified versions...
Security researchers at Lab52 have uncovered a new campaign by the Lazarus Group, in which threat actors...
Trellix Advanced Research Center (ARC) has exposed a sophisticated espionage campaign conducted by the SideWinder APT group,...
The Apache Software Foundation has released multiple security patches for Apache Tomcat, addressing three newly disclosed vulnerabilities...
Arctic Wolf Labs has uncovered a sophisticated Loader-as-a-Service (LaaS) operation dubbed “Caminho” — a Brazilian-origin malware loader...
CYFIRMA Threat Intelligence has released an in-depth technical report on GhostGrab, a sophisticated Android malware family that...
Netskope Threat Labs has discovered a rapidly spreading Python-based infostealer dubbed RedTiger, which is being repurposed from...
When users subscribe to iCloud, their photo libraries can be automatically uploaded in the background without any...
CVE-2024-22127 (CVSS 9.1), this time discovered in SAP NetWeaver AS Java's Administrator Log Viewer plug-in
Identified as CVE-2024-2194 with a CVSS score of 7.2, this vulnerability is classified as a stored cross-site scripting (XSS) issue
PoC exploit code will be released at "a later date "for a high-severity CVE-2024-21378 flaw allowing RCE in Microsoft Outlook
Security researchers have exposed a crafty attack campaign manipulating a decentralized content delivery network (CDN)
Attackers are tricking users into downloading a dangerous infostealer disguised as a legitimate Adobe Reader installation file
A flaw (CVE-2024-2370, CVSS 9.8) has been discovered in older versions of ManageEngine Desktop Central, developed by Zoho Corporation
A dangerous new malware named Planet Stealer is making its rounds in the cybercriminal underworld, and security experts warn
In an era where digital transactions are commonplace, the threat of financial malware has surged, posing significant...
Security researchers at GuidePoint have uncovered a new weapon in the BianLian ransomware gang’s arsenal – a...
The vulnerability, designated as CVE-2024-22252, could potentially allow attackers to execute malicious code on affected systems.
CVE-2024-22857 is a heap-based buffer overflow that could allow attackers to remotely execute arbitrary code on systems
The payload delivered through this elaborate ruse is a Lua JIT malware, comprising a compiled LuaJIT executable and a batch script
Security researchers at QiAnXin Threat Intelligence Center have uncovered a sophisticated malware campaign waged by the Kimsuky APT group
ASEC have uncovered a disturbing malware campaign that's cleverly disguised as a legitimate installer for the popular Notion software
CVE-2023-41313 allows attackers to exploit weaknesses in the authentication process within Apache Doris using a timing attack
One such group, known as UAC-0050 or "The DaVinci Group," has emerged as a key player in the ongoing conflict between Russia and Ukraine
The company's investigation revealed three previously unknown vulnerabilities in popular tools used for font processing and manipulation
Muddled Libra threat group initially focused on organizations within the software automation, outsourcing, and telecommunications sectors
Using info mined from the stolen data, Midnight Blizzard gained access to Microsoft's internal systems, including sensitive source code
Canon has released a security bulletin addressing a buffer overflow vulnerability (CVE-2024-2184, CVSS 9.8) in their WSD protocol process
CVE-2024-21899 (CVSS 9.8): An authentication bypass vulnerability that could allow unauthorized remote access to the NAS device
Magnet Goblin is a financially motivated threat actor demonstrating proficiency in swiftly exploiting 1-day software vulnerabilities