Do Son
Researchers from SentinelLABS, in collaboration with the Digital Security Lab of Ukraine, have exposed a coordinated spearphishing...
Latest news
The Sekoia Threat Detection & Research (TDR) Team has identified a new wave of cyber espionage activity...
At its recent “GM Forward” media event, General Motors (GM) announced a major strategic shift in its...
As concerns over social media addiction continue to mount, YouTube has officially introduced a timer feature for...
cybernewswire
Palo Alto, California, 23rd October 2025, CyberNewsWire
The well-known online forum Reddit has announced legal action against Perplexity, SerApi, OxyLabs, and AWMProxy, accusing these...
Renowned analyst Ming-Chi Kuo recently released a supply chain report revealing that sales of Apple’s newly launched...
Earlier this month, Microsoft released a Windows 11 cumulative update addressing several known feature issues and security...
The fierce standoff between Apple and the European Union over the Digital Markets Act (DMA) has officially...
With the rapid advancement and widespread adoption of cutting-edge AI generation tools such as OpenAI’s Sora 2,...
The notorious 8220 Gang has resurfaced, targeting cloud infrastructure in a campaign demonstrating significant advancements
Researchers at Talos and CERT.NGO have pulled back the curtain on new malicious components deployed by the notorious Turla APT group
Trustwave SpiderLabs' Email Security team has uncovered a sophisticated Phishing-as-a-Service (PaaS) platform known as Tycoon Group
CVE-2024-23349 in the way Apache Answer handles question summaries could allow malicious actors to embed harmful code
The primary malware, dubbed "TrollAgent," was a data thief developed in GoLang and capable of stealing a wide array of information
Lucifer DDoS botnet is exploiting misconfigurations and vulnerabilities in Apache Hadoop and Apache Druid (CVE-2021-25646)
CVE-2024-25124 (CVSS 9.4) stems from allowing wildcard origins (*) in CORS configurations while simultaneously enabling credentials
Carpet-Bombing DDoS attacks inundate entire CIDR blocks, cloaking their malicious intent in a veil of complexity and making detection
Rhino Security Labs uncovered this flaw (CVE-2024-1212, CVSS 10) – an unauthenticated RCE allowing attackers to complete a system takeover
OpenVPN has released version 2.6.9 for Windows, Mac, and Linux, addressing a severe privilege escalation vulnerability (CVE-2023-7235)
Masquerading an internal sale of a BMW vehicle, APT29 distributed over 200 emails, embedding the RAR file that served as the Trojan horse
CVE-2024-1709 (CVSS Score 10): An authentication bypass that offers attackers unhindered backdoor entry to critical systems
Domains associated with Operation Texonto were found linked to potential influence operations aimed at Russian citizens
The Spring Framework, a cornerstone of countless enterprise Java applications, recently revealed a significant vulnerability (CVE-2024-22243)
Atlassian has released a security update addressing CVE-2024-21678 (CVSS 8.5), a high-severity stored cross-site scripting vulnerability
Creates, a popular online retailer of hair styling tools, has suffered a significant data breach that exposed credit card details
Tracked as CVE-2024-1317 (CVSS 8.8), this flaw was pinpointed within all versions up to and including 4.4.2 of the Feedzy plugin
The attackers hid malicious code in packages designed to mimic legitimate ones, using a technique called DLL sideloading to slip past security defenses
CVE-2024-21726 opens the door to multiple Cross-Site Scripting (XSS) attacks, potentially granting hackers full control of your website
The RansomHouse ransomware group exemplifies the sophisticated, profitable, and adaptable nature of modern cyber extortion campaigns
If left unaddressed, threat actors could exploit these flaws (CVE-2024-22245 and CVE-2024-22250) to hijack user sessions and infiltrate sensitive systems
The Lazarus Group, a skilled North Korean state-sponsored hacking collective, continues to aggressively target entities in the global defense sector