Latest news
NetSupport RAT Campaign Abuses ClickFix to Infect Hosts; 3 Threat Clusters Use RMM for Covert Access
Clicking those familiar "Windows" or "Android" download buttons unleashes the RATs, cleverly disguised behind innocent-sounding file names
Security researchers have sounded the alarm on a critical vulnerability (CVE-2024-0778) affecting outdated Zhejiang Uniview ISC cameras
Two vulnerabilities (CVE-2021-36380 & CVE-2023-21237), known to be under active attack, have landed on their KEV catalog
CVE-2024-22252, CVE-2024-22253 (UHCI/XHCI USB Controller): Use-after-free flaws with CVSSv3 scores of 9.3 (Workstation/Fusion) and 8.4 (ESXi)
Apple recently pushed out emergency patches to fix two "zero-day" vulnerabilities (CVE-2024-23225 and CVE-2024-23296) that are already under attack
CVE-2024-2048 that could allow attackers to bypass authentication and gain unauthorized access to your organization's most valuable secrets
CISA has added a critical Windows Kernel vulnerability (CVE-2024-21338) to its Known Exploited Vulnerabilities catalog
Fully Undetectable links are transforming the way cybercriminals execute phishing campaigns, malware distribution, and other nefarious schemes
A severe security flaw (CVE-2023-6825) has been uncovered in the popular File Manager and File Manager Pro WordPress plugins
A newly discovered backdoor malware dubbed 'WogRAT' is raising alarms for both Windows and Linux users.
two (CVE-2024-1929, CVE-2024-1930) critical vulnerabilities could allow attackers to gain complete control of affected systems
FortiGuard Labs uncovered a threat actor leveraging a sophisticated attack to distribute the CHAVECLOAK banking Trojan
CVE-2024-0039 is a critical security flaw in the System component that could lead to RCE with no additional execution privileges needed
The vulnerabilities, identified as CVE-2024-27198 and CVE-2024-27199, expose the underbelly of TeamCity's security mechanisms
TA577, a prolific cybercrime group responsible for past Qbot campaigns and associated with Black Basta ransomware attacks
A severe security hole (CVE-2024-27497) in the Linksys E2000 router lets hackers waltz right into your network
Predator mobile spyware incorporates Python-based modules allowing for seamless updates and the introduction of new functionalities
Russia's NoName057(16) has become synonymous with the DDoSia project, a relentless campaign of DDoS attacks that target nations supporting Ukraine
Dubbed "Morris II," this zero-click worm exploits adversarial self-replicating prompts to spread across interconnected GenAI-powered apps
Security researchers from NVISO have uncovered two sophisticated TLS-based backdoors, dubbed SparkCockpit and SparkTar