Latest news
ClamAV's developers issued critical patches addressing two vulnerabilities (CVE-2024-20328 & CVE-2024-20290) within the library
CVE-2024-20254 and CVE-2024-20255 affect devices with default configurations, amplifying the potential reach of the attacks
Raspberry Robin operates within a vast malware ecosystem, serving as an initial access broker for further malicious deployments
Glassy of EagleCloud, who found CVE-2024-20931, also provides technical details on the vulnerability, and publishes PoC code
The ramifications of falling victim to the XPhase Clipper campaign are dire, with users facing the prospect of substantial financial losses
Many of Iran's initial cyber forays consisted of repurposing old data breaches and overstating the effectiveness of their attacks
initially disclosed in a security advisory update on September 5, 2023, this vulnerability carries a chilling CVSS score of 8.8
CVE-2023-7216 could allow a remote, unauthenticated attacker to orchestrate a scenario where an unsuspecting user
A new, sophisticated attack campaign, dubbed STEADY#URSA, has emerged, casting a long shadow over the cybersecurity defenses of Ukraine's military
Assigned a CVSS score of 9.8, CVE-2024-23917 falls into the critical category, signaling a high risk of exploitability and impact
APT-K-47 has quickly garnered attention for its sophisticated cyber-attack techniques, which bear similarities to other notorious APT groups
CVE-2023-6989 allowed for the inclusion of PHP files on a server by an unauthenticated attacker, leading to the execution of arbitrary PHP code
The vulnerabilities, encompassing a range of out-of-bounds write issues (CVE-2023-6229 through CVE-2023-6234 and CVE-2024-0244)
CVE-2024-0031 stands out for its potential to allow attackers to execute malicious code remotely on a victim's device
Discover how it retrieves script.py (the info-stealer), Document.zip (Python 3.11 with required libraries), and bypass.vbs (the Python executor)
CVE-2024-23108 and CVE-2024-23109 could potentially allow remote, unauthenticated attackers to execute unauthorized commands
CVE-2024-1143 has been rated with the maximum severity score of 10.0, classifying it as Critical—the highest level of urgency.
ESET has uncovered a startling revelation: a series of Android espionage apps bundled with the VajraSpy remote access trojan (RAT)
A researcher has published a proof-of-concept (PoC) tool for a kernel vulnerability, CVE-2024-23208 remedied in iOS 17.3