Latest news
Italian Computer Security Incident Response Team has issued a critical warning about a resurgence of the "Helpdesk Support" phishing campaign
NIST has assigned CVE-2020-36773 a base score of 9.8 (out of 10) under the CVSS v3.1 system, classifying it as "Critical."
Recently disclosed vulnerabilities (CVE-2023-28078 and CVE-2023-32462) in Dell OS10 Networking Switches pose a severe threat.
According to Qrator Labs, 2023 was a year of marked transformation in the world of Distributed Denial of Service (DDoS) attacks.
A disclosed privilege escalation flaw (CVE-2024-21915) with a critical CVSS score of 9.0 exists in Rockwell's FactoryTalk Service Platform
A vulnerability in Dell EMC Enterprise SONiC (CVE-2023-32484) could have profound consequences for your data center network security
Alpha ransomware went unnoticed until its operations grew dramatically in recent weeks, including the establishment of a data leak site
TAG-70 threat actor leverages sophisticated techniques to infiltrate and exploit, revealing a saga of digital warfare
After Check Point published a technical writeup on CVE-2024-21413, the PoC code targeting the critical issue was published on GitHub
CVE-2024-23476, CVE-2024-23477, and CVE-2024-23479, these flaws represent a grave risk to the integrity & security of enterprise systems
A vulnerability (CVE-2024-23832) has been exposed, with proof-of-concept (PoC) exploit code now freely circulating in the wild
CVE-2020-3259, with a CVSS score of 7.5, targets the web services interface of Cisco Adaptive Security Appliance (ASA) Software
This sample included the SpyNote RAT, featuring new additions aimed at evading analysis and targeting cryptocurrencies specifically.
Squid, the widely used web proxy and caching server, is facing a high-severity Denial of Service (DoS) vulnerability (CVE-2024-25617)
A recent Malwarebytes Labs investigation unveiled a significant campaign of fraudulent ads served to users through Google searches
CVE-2023-4408, stemming from flaws in DNS message parsing, presents a potential avenue for system overloads via manipulated queries
Kryptina RaaS made its debut in December 2023, offering cybercriminals a lightweight, customizable, and fast ransomware solution
CVE-2023-52160, CVE-2023-52161 in WiFi software are allowing attackers to trick victims into connecting to evil twins of trusted networks
CVE-2024-21892 has been identified in how Node.js applications running on Linux handle environment variables under elevated privileges
LINE's comprehensive investigation into the cyber-attack, initiated via a subsidiary's compromised system, has revealed the extent of the data breach
NGINX has released an urgent patch to address 2 flaws (CVE-2024-24989, CVE-2024-24990) lurking within its experimental HTTP/3 implementation
The mention of "Fade Stealer" within the setup.py code unraveled the intentions behind these deceptive packages.