Latest news
This flaw (CVE-2024-1403) carries a CVSS score of 10 โ the highest severity rating possible, affecting Progressย OpenEdge
Stored XSS vulnerability (CVE-2023-40000) was recently discovered and patched in the widely used WordPress plugin LiteSpeed Cache
Daikin Industries recently faced a challenging situation - a data breach compromising the personal data of its suppliers
A significant security flaw (CVE-2023-50379) has been uncovered in Apache Ambari versions earlier than 2.7.8
These vulnerabilities, assigned CVE-2024-24401 and CVE-2024-24402, leave businesses using Nagios XI exposed to potential cyberattacks
Forcepoint has uncovered a sophisticated malware campaign exploiting Booking.com's brand reputation to deliver Agent Tesla malware
A critical SQL injection vulnerability (CVE-2024-1698) was discovered in the widely used NotificationX WordPress plugin
Cyble Research and Intelligence Labs has uncovered a sophisticated phishing campaign actively exploiting ConnectWise ScreenConnect
Abyss Locker ransomware terminates a plethora of processes related to security, productivity, and system management software
A startling revelation linked Earth Lusca to a Chinese entity known as I-Soon, unmasked through a breach of private documents
These vulnerabilities, dubbed CVE-2024-26592 (CVSS 9.0) and CVE-2024-26594 (CVSS 9.3), carried severe consequences
The infamous PlugX RAT, used by various threat actors, frequently leverages DLL side-loading to evade detection
The new PIKABOT version introduces a novel unpacking method alongside heavy obfuscation, marking a significant evolution in its design
This campaign, attributed to the Russia-aligned Doppelgรคnger network, focused on anti-Ukrainian content but has expanded to target audiences
The campaign investigated demonstrates Turla's focus on targeted attacks. This 'Pelmeni Wrapper' loads the next stage payload.
CVE-2024-1071 (CVSS 9.8), underscoring the grave risk it poses to websites utilizing this widely adopted plugin
The recently disclosed vulnerabilities in ScreenConnect (CVE-2024-1709, CVE-2024-1708) necessitate immediate action
A high-severity vulnerability, designated CVE-2024-26582, has been discovered within the Transport Layer Security subsystem of the Linux kernel
The CVE-2024-23204 vulnerability existed in macOS and iOS devices running versions before macOS Sonoma 14.3, iOS 17.3, and iPadOS 17.3
VOLTZITE, a threat group known for persistent targeting of global critical infrastructure sectors, continues to refine its methods