Do Son
Researchers from Elastic Security Labs, in collaboration with Texas A&M University System (TAMUS) Cybersecurity, have uncovered a...
Latest news
Researchers at Group-IB Threat Intelligence have uncovered a new global phishing and espionage campaign conducted by the...
The SUSE Rancher Security team has issued a critical advisory addressing a command injection and buffer overflow...
Researchers at Trend Micro have released an in-depth analysis of Vidar Stealer v2.0, a major overhaul of...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert regarding a critical authentication bypass vulnerability...
Researchers at the Genians Security Center (GSC) have uncovered an active Lumma Infostealer campaign leveraging AutoIt scripts,...
Oracle has released its October 2025 Critical Patch Update (CPU), fixing a massive 374 security vulnerabilities and...
GitLab has released versions 18.5.1, 18.4.3, and 18.3.5 for both Community Edition (CE) and Enterprise Edition (EE)...
Developer Jay Gibson recently contacted TechCrunch to recount his experience of being targeted by a state-sponsored spyware...
Google has officially confirmed the release of the Galaxy XR, the long-anticipated Android extended reality headset jointly...
Creates, a popular online retailer of hair styling tools, has suffered a significant data breach that exposed credit card details
Tracked as CVE-2024-1317 (CVSS 8.8), this flaw was pinpointed within all versions up to and including 4.4.2 of the Feedzy plugin
The attackers hid malicious code in packages designed to mimic legitimate ones, using a technique called DLL sideloading to slip past security defenses
CVE-2024-21726 opens the door to multiple Cross-Site Scripting (XSS) attacks, potentially granting hackers full control of your website
The RansomHouse ransomware group exemplifies the sophisticated, profitable, and adaptable nature of modern cyber extortion campaigns
If left unaddressed, threat actors could exploit these flaws (CVE-2024-22245 and CVE-2024-22250) to hijack user sessions and infiltrate sensitive systems
The Lazarus Group, a skilled North Korean state-sponsored hacking collective, continues to aggressively target entities in the global defense sector
ConnectWise issued a critical security advisory, exposing two gaping security vulnerabilities in its popular ScreenConnect software
A disclosed vulnerability in Spring Security (CVE-2024-22234) could lead to unauthorized access within affected Java web applications
CVE-2023-49109 could potentially permit a remote attacker to execute arbitrary code on the DolphinScheduler server
These campaigns focus heavily on Latin America, notably targeting victims with the notorious Astaroth, Mekotio, and Ousaban trojans
Key to APT group Earth Preta is a custom malware dubbed DOPLUGS, a critical tool leveraged in a range of recent intrusions.
AsukaStealer, a sophisticated malware, was first unveiled on a Russian-language cybercrime forum. For a monthly fee of $80
Zyxel’s recent security advisory spotlights multiple vulnerabilities present in select firewall and access point models. Failure to...
A recently discovered vulnerability (CVE-2024-1597, CVSS 10) highlights the importance of vigilance and proactive security measures
Autodesk AutoCAD, a widely used CAD software across architecture, and manufacturing industries, has been found to contain 40 zero-day flaws
A flaw (CVE-2024-0646, CVSS 7.8) discovered in the Linux Kernel Transport Layer Security could have been exploited to gain elevated system privileges
UK's National Crime Agency has confirmed that Lockbit's operations have been disrupted due to the international joint law enforcement effort
The Thunderbolt interface has been notably affected, involving both software and firmware vulnerabilities.
The CVE-2024-22030 flaw carries a medium-to-high severity rating and if exploited, a malicious actor to take over existing Rancher nodes.
A PoC was disclosed for a severe design flaw (CVE-2023-50387, KeyTrap) in Domain Name System Security Extensions (DNSSEC)
A critical RCE vulnerability (CVE-2024-25600, CVSS 9.8) has been discovered in the widely used WordPress site builder, Bricks Builder