Latest news
Two disclosed critical vulnerabilities (CVE-2024-25106 and CVE-2024-24830) expose users to a dangerous combination of unauthorized access
Arctic Wolf Labs uncovered threat actors are leveraging CVE-2023-22527 to deploy C3RB3R ransomware alongside a suite of other malicious payloads
A recently discovered security bug in ExpressVPN's Windows software, tracked as CVE-2024-25728, has forced the popular VPN provider
This vulnerability, designated CVE-2024-0985 (CVSS 8.0), could allow attackers to execute malicious code with elevated privileges
Electron team has stepped forward to challenge these assertions, shedding light on the intricacies of the vulnerabilities
A PoC exploit code and technical details have been made available for a zero-day flaw, tracked as CVE-2022-4262, affecting Google Chrome
one of the internet giants, Namecheap has been hit by a series of DDoS attacks that threaten to disrupt its operations.
CVE-2024-23749, CVE-2024-25003, and CVE-2024-25004 exploit weaknesses in how KiTTY processes certain commands sent by remote servers.
The KV-botnet operates in the shadows, infecting small-office, home-office (SOHO) routers and firewall devices worldwide.
CVE-2024-24806, with a CVSS score of 7.3, exposes a server-side request forgery (SSRF) vulnerability within the very core of libuv
A PoC for CVE-2024-20328, a critical vulnerability in ClamAV, that allows remote code execution, was published
Dubbed CVE-2024-23113 (CVSS 9.8), this flaw allow unauthenticated attackers to remotely execute code on affected devices.
Bitdefender has uncovered a never-before-seen backdoor targeting Mac users, christened Trojan.MAC.RustDoor.
CVE-2024-22394 exposes an improper authentication flaw, potentially allowing remote attackers to bypass authentication on affected devices
MalDocs leveraging old CVEs often evade detection due to their sophisticated evasion techniques. These techniques include encryption
CVE-2024-24821 casts a shadow over Composer's reliability, exposing users to potential code execution and privilege escalation threats
The Zardoor backdoor is not merely a piece of malware but a sophisticated espionage framework, designed for long-term infiltration
CVE-2024-21762 (CVSS 9.6), poses a significant risk, potentially enabling unauthenticated remote code execution on affected devices.
CVE-2024-23452 flaw that could potentially allow attackers to smuggle malicious requests through the bRPC's HTTP server.
Coyote represents a paradigm shift in the realm of Brazilian banking Trojans, embracing modern technologies like Node.js, .NET
DotStealer malware, masquerading within the binary veil of a 32-bit executable, crafts its lair directly on the user's system