Latest news
CVE-2024-25089 is a critical security vulnerability discovered in Malwarebytes Binisoft Windows Firewall Control before version 6.9.9.2
CVE-2024-21399 (CVSS 8.3): there have been no confirmed instances of exploitation or disclosure of this vulnerability.
Notably, DiceLoader has been actively used since 2021, with the malware often delivered via a PowerShell script.
Unit 42 researchers stumbled upon Mispadu Stealer's latest variant while hunting for the SmartScreen CVE-2023-36025 vulnerability.
The compromised data included access credentials belonging to both individual consumers and enterprises, unlocking the AnyDesk customer portal
The consequences of CVE-2023-31505 are significant. This vulnerability affects the latest version of Schlix CMS, specifically version v2.2.8-1
The PoC code not only exposes CVE-2024-21893 but also enables attackers to chain it with CVE-2024-21887, allowing for unauthenticated RCE
AnyDesk, a widely used remote desktop software, recently announced a significant breach within its production environment
backdoor accounts - a tactic not limited to any single operating system but prevalent across both Windows and Linux environments
CVE-2024-23832 in the decentralized social networking platform Mastodon could be exploited to impersonate and take over any remote account
As investigators delve deeper into the labyrinthine world of the UAC-0027 hacking group, they have uncovered 486 IP addresses
Wordfence has sounded the alarm, reporting over 1,400 blocked attacks targeting CVE-2023-6700 in the past 24 hours alone
The final phase of the ApateWeb campaign, Layer 3, is where victims encounter the malicious payload. This payload can manifest as scareware
Dubbed CVE-2024-1072, this flaw was a gaping hole rated 8.2 out of 10 on the severity scale. This high rating underscored the potential havoc
This realm has now become the breeding ground for a more sinister threat: the macOS.Bkdr.Activator malware
There is no publicly available PoC exploit for CVE-2024-21833. Evidence from underground forums indicates active exploitation of this flaw
Discovered by vigilant researchers at Trend Micro, the second vulnerability remedied in this update was the RCE POP chain flaw
Elastic Security Labs uncovered a sophisticated cyber intrusion, dubbed REF0657, targeting a financial services organization in South Asia
CVE-2024-21626, a critical flaw in runc, allowed for a potential container escape, enabling unauthorized access to the host filesystem