Do Son
Trend Research has uncovered a highly sophisticated ransomware campaign by the Agenda group, also known as Qilin,...
Latest news
Google’s Threat Intelligence Group (GTIG) has exposed an ongoing social engineering campaign operated by a financially motivated...
Ubiquiti has released a security update to address a critical authentication bypass vulnerability (CVE-2025-52665) in its UniFi...
Check Point Research (CPR) has uncovered a sophisticated, large-scale malware distribution campaign on YouTube, dubbed the “YouTube...
Researchers from Palo Alto Networks’ Unit 42 have uncovered a massive, fast-evolving smishing campaign tied to a...
The OpenWrt Project has patched two high-severity vulnerabilities affecting its Linux-based firmware for embedded devices. The flaws,...
A new Trend Research report has revealed an alarming shift in cyberespionage tactics among China-aligned APT groups,...
Researchers from Netskope have uncovered a new cross-platform Python-based Remote Access Trojan (RAT) disguised as a popular...
Two high-severity vulnerabilities disclosed by HashiCorp could expose Vault deployments to denial-of-service (DoS) attacks and cross-account authentication...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert warning of multiple high-severity vulnerabilities affecting...
TA4903 cybercriminal group has displayed a consistent pattern of sophisticated phishing tactics in pursuit of sensitive corporate data
A newly discovered critical vulnerability (CVE-2024-27917) in Shopware 6, a widely used open-source e-commerce platform
Cado Security Labs' recent discovery exposed a complex malware campaign zeroing in on Linux servers misconfigured with popular cloud services
Qualcomm has released a security bulletin this month, patching 16 flaws – including two critical flaws (CVE-2023-28578 and CVE-2023-28582)
The proof of concept (PoC) for exploiting CVE-2024-27302 is alarmingly straightforward, underscoring the vulnerability's severity
Japanese school uniform retailer Kanko Online Shop has disclosed a data breach affecting its Kanko Online Shop Harajuku Select Square
GhostSec aims to fund further operations, leveraging a variety of tactics from ransomware to DoS attacks to achieve their objectives.
Clicking those familiar "Windows" or "Android" download buttons unleashes the RATs, cleverly disguised behind innocent-sounding file names
Security researchers have sounded the alarm on a critical vulnerability (CVE-2024-0778) affecting outdated Zhejiang Uniview ISC cameras
Two vulnerabilities (CVE-2021-36380 & CVE-2023-21237), known to be under active attack, have landed on their KEV catalog
CVE-2024-22252, CVE-2024-22253 (UHCI/XHCI USB Controller): Use-after-free flaws with CVSSv3 scores of 9.3 (Workstation/Fusion) and 8.4 (ESXi)
Apple recently pushed out emergency patches to fix two "zero-day" vulnerabilities (CVE-2024-23225 and CVE-2024-23296) that are already under attack
CVE-2024-2048 that could allow attackers to bypass authentication and gain unauthorized access to your organization's most valuable secrets
CISA has added a critical Windows Kernel vulnerability (CVE-2024-21338) to its Known Exploited Vulnerabilities catalog
Fully Undetectable links are transforming the way cybercriminals execute phishing campaigns, malware distribution, and other nefarious schemes
A severe security flaw (CVE-2023-6825) has been uncovered in the popular File Manager and File Manager Pro WordPress plugins
A newly discovered backdoor malware dubbed 'WogRAT' is raising alarms for both Windows and Linux users.
two (CVE-2024-1929, CVE-2024-1930) critical vulnerabilities could allow attackers to gain complete control of affected systems
FortiGuard Labs uncovered a threat actor leveraging a sophisticated attack to distribute the CHAVECLOAK banking Trojan
CVE-2024-0039 is a critical security flaw in the System component that could lead to RCE with no additional execution privileges needed
The vulnerabilities, identified as CVE-2024-27198 and CVE-2024-27199, expose the underbelly of TeamCity's security mechanisms
TA577, a prolific cybercrime group responsible for past Qbot campaigns and associated with Black Basta ransomware attacks