Do Son
The Internet Systems Consortium (ISC) has issued patches for three high-severity vulnerabilities impacting the BIND 9 DNS...
Latest news
Atlassian has released patches addressing a high-severity Path Traversal vulnerability (CVE-2025-22167) affecting Jira Software Data Center and...
Symantec Exposes Chinese APT Overlap: Zingdoor, ShadowPad, and KrustyLoader Used in Global Espionage
Symantec Exposes Chinese APT Overlap: Zingdoor, ShadowPad, and KrustyLoader Used in Global Espionage
Symantec’s investigation uncovered a complex web of interconnected Chinese espionage operations, with infrastructure and tooling overlapping multiple...
Researchers from Socket’s Threat Research Team have uncovered an active homoglyph typosquat on NuGet impersonating the widely...
Security researcher Batuhan Er from HawkTrace has detailed a critical remote code execution (RCE) vulnerability in Microsoft...
Researchers from Elastic Security Labs, in collaboration with Texas A&M University System (TAMUS) Cybersecurity, have uncovered a...
Researchers at Group-IB Threat Intelligence have uncovered a new global phishing and espionage campaign conducted by the...
The SUSE Rancher Security team has issued a critical advisory addressing a command injection and buffer overflow...
Researchers at Trend Micro have released an in-depth analysis of Vidar Stealer v2.0, a major overhaul of...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert regarding a critical authentication bypass vulnerability...
ConnectWise issued a critical security advisory, exposing two gaping security vulnerabilities in its popular ScreenConnect software
A disclosed vulnerability in Spring Security (CVE-2024-22234) could lead to unauthorized access within affected Java web applications
CVE-2023-49109 could potentially permit a remote attacker to execute arbitrary code on the DolphinScheduler server
These campaigns focus heavily on Latin America, notably targeting victims with the notorious Astaroth, Mekotio, and Ousaban trojans
Key to APT group Earth Preta is a custom malware dubbed DOPLUGS, a critical tool leveraged in a range of recent intrusions.
AsukaStealer, a sophisticated malware, was first unveiled on a Russian-language cybercrime forum. For a monthly fee of $80
Zyxel’s recent security advisory spotlights multiple vulnerabilities present in select firewall and access point models. Failure to...
A recently discovered vulnerability (CVE-2024-1597, CVSS 10) highlights the importance of vigilance and proactive security measures
Autodesk AutoCAD, a widely used CAD software across architecture, and manufacturing industries, has been found to contain 40 zero-day flaws
A flaw (CVE-2024-0646, CVSS 7.8) discovered in the Linux Kernel Transport Layer Security could have been exploited to gain elevated system privileges
UK's National Crime Agency has confirmed that Lockbit's operations have been disrupted due to the international joint law enforcement effort
The Thunderbolt interface has been notably affected, involving both software and firmware vulnerabilities.
The CVE-2024-22030 flaw carries a medium-to-high severity rating and if exploited, a malicious actor to take over existing Rancher nodes.
A PoC was disclosed for a severe design flaw (CVE-2023-50387, KeyTrap) in Domain Name System Security Extensions (DNSSEC)
A critical RCE vulnerability (CVE-2024-25600, CVSS 9.8) has been discovered in the widely used WordPress site builder, Bricks Builder
Italian Computer Security Incident Response Team has issued a critical warning about a resurgence of the "Helpdesk Support" phishing campaign
NIST has assigned CVE-2020-36773 a base score of 9.8 (out of 10) under the CVSS v3.1 system, classifying it as "Critical."
Recently disclosed vulnerabilities (CVE-2023-28078 and CVE-2023-32462) in Dell OS10 Networking Switches pose a severe threat.
According to Qrator Labs, 2023 was a year of marked transformation in the world of Distributed Denial of Service (DDoS) attacks.
A disclosed privilege escalation flaw (CVE-2024-21915) with a critical CVSS score of 9.0 exists in Rockwell's FactoryTalk Service Platform
A vulnerability in Dell EMC Enterprise SONiC (CVE-2023-32484) could have profound consequences for your data center network security
Alpha ransomware went unnoticed until its operations grew dramatically in recent weeks, including the establishment of a data leak site