Latest news
Magnet Goblin is a financially motivated threat actor demonstrating proficiency in swiftly exploiting 1-day software vulnerabilities
Hong Kong is facing an increasingly complex phishing threat landscape. Hackers are employing sophisticated techniques to impersonate banks
The Balada Injector campaign, a sophisticated malware operation, has set its sights on exploiting a vulnerability within the WordPress plugin
Kontrol and Elock locks, both utilizing firmware from the company Sciener, have been found riddled with security vulnerabilities
While India faces a surge in these pig-butchering scams, the phenomenon is not confined by geography. Similar tactics have been deployed in Taiwan
NarniaRAT boasts information-stealing capabilities and swiftly conscripts the compromised machine into the Fenix Botnet.
CVE-2023-42662: Exposure of Access Tokens (CVSS 9.3) Rated critical, this flaw compromises Artifactory's Single Sign-On (SSO) feature
CVE-2024-2044 in pgAdmin 4 could have allowed a remote, authenticated attacker to execute arbitrary code on affected systems
A severe security vulnerability (CVE-2024-28222) has been uncovered in Veritas NetBackup, the widely used enterprise backup solution
The fallout from the devastating hacker attack on IT provider Xplain continues as the NCSC publishes a detailed report on the leaked data
A flaw (CVE-2024-27295) was found in Directus, a versatile open-source content management platform favored by developers
Copybara campaign unfolds in a series of meticulously executed stages. TAs are weaponizing a combination of social engineering, phishing infrastructure
Akamai offers a proof-of-concept (PoC) Theme file and video, aiding in understanding and replicating the CVE-2024-21320 vulnerability.
Attackers are becoming increasingly adept at weaponizing trusted resources and services, as seen in a recent Python-based infostealer campaign
A vulnerability (CVE-2024-25111, CVSS 8.6) has been uncovered that could allow malicious actors to cripple Squid-powered systems
TA4903 cybercriminal group has displayed a consistent pattern of sophisticated phishing tactics in pursuit of sensitive corporate data
A newly discovered critical vulnerability (CVE-2024-27917) in Shopware 6, a widely used open-source e-commerce platform
Cado Security Labs' recent discovery exposed a complex malware campaign zeroing in on Linux servers misconfigured with popular cloud services
Qualcomm has released a security bulletin this month, patching 16 flaws β including two critical flaws (CVE-2023-28578 and CVE-2023-28582)
The proof of concept (PoC) for exploiting CVE-2024-27302 is alarmingly straightforward, underscoring the vulnerability's severity
Japanese school uniform retailer Kanko Online Shop has disclosed a data breach affecting its Kanko Online Shop Harajuku Select Square
GhostSec aims to fund further operations, leveraging a variety of tactics from ransomware to DoS attacks to achieve their objectives.