Do Son
Researchers at the Genians Security Center (GSC) have uncovered an active Lumma Infostealer campaign leveraging AutoIt scripts,...
Latest news
Oracle has released its October 2025 Critical Patch Update (CPU), fixing a massive 374 security vulnerabilities and...
GitLab has released versions 18.5.1, 18.4.3, and 18.3.5 for both Community Edition (CE) and Enterprise Edition (EE)...
Developer Jay Gibson recently contacted TechCrunch to recount his experience of being targeted by a state-sponsored spyware...
Google has officially confirmed the release of the Galaxy XR, the long-anticipated Android extended reality headset jointly...
Following Elon Musk’s acquisition of the social platform X (formerly Twitter), the company announced plans to overhaul...
According to a support bulletin released by Microsoft, updates to Windows 11 24H2/25H2 and Windows Server 2025...
As the battle for dominance in the AI browser arena intensifies, OpenAI has officially unveiled its AI-powered...
Google has released a Stable Channel update (version 141.0.7390.122/.123) for Windows, Mac, and Linux, addressing a high-severity...
Google’s Threat Intelligence Group (GTIG) has uncovered multiple coordinated pro-Russia information operations (IO) exploiting the September 9–10,...
TAG-70 threat actor leverages sophisticated techniques to infiltrate and exploit, revealing a saga of digital warfare
After Check Point published a technical writeup on CVE-2024-21413, the PoC code targeting the critical issue was published on GitHub
CVE-2024-23476, CVE-2024-23477, and CVE-2024-23479, these flaws represent a grave risk to the integrity & security of enterprise systems
A vulnerability (CVE-2024-23832) has been exposed, with proof-of-concept (PoC) exploit code now freely circulating in the wild
CVE-2020-3259, with a CVSS score of 7.5, targets the web services interface of Cisco Adaptive Security Appliance (ASA) Software
This sample included the SpyNote RAT, featuring new additions aimed at evading analysis and targeting cryptocurrencies specifically.
Squid, the widely used web proxy and caching server, is facing a high-severity Denial of Service (DoS) vulnerability (CVE-2024-25617)
A recent Malwarebytes Labs investigation unveiled a significant campaign of fraudulent ads served to users through Google searches
CVE-2023-4408, stemming from flaws in DNS message parsing, presents a potential avenue for system overloads via manipulated queries
Kryptina RaaS made its debut in December 2023, offering cybercriminals a lightweight, customizable, and fast ransomware solution
CVE-2023-52160, CVE-2023-52161 in WiFi software are allowing attackers to trick victims into connecting to evil twins of trusted networks
CVE-2024-21892 has been identified in how Node.js applications running on Linux handle environment variables under elevated privileges
LINE's comprehensive investigation into the cyber-attack, initiated via a subsidiary's compromised system, has revealed the extent of the data breach
NGINX has released an urgent patch to address 2 flaws (CVE-2024-24989, CVE-2024-24990) lurking within its experimental HTTP/3 implementation
The mention of "Fade Stealer" within the setup.py code unraveled the intentions behind these deceptive packages.
CVE-2024-21410 flaw offers remote, unauthenticated threat actors a pathway to privilege escalation through NTLM relay attacks.
Dubbed the "TicTacToe Dropper," this malware has demonstrated the sophistication and adaptability of modern cyber threats.
Dubbed the #MonikerLink bug, CVE-2024-21413 (CVSS 9.8) exploits a particular way Outlook processes hyperlinks
In the ever-evolving landscape of digital security, the GitHub Enterprise Server (GHES) has emerged as a cornerstone...
Revenge RAT sets its nefarious plan into motion, executing a series of malicious activities aimed at compromising system integrity
The vulnerabilities, identified as CVE-2023-20576, CVE-2023-20577, CVE-2023-20579, and CVE-2023-20587, carry a 'High' severity rating
The report delves into a specific threat actor, dubbed TropiCracked, whose nefarious exploits have targeted over 800 YouTube accounts