Do Son
The official website of Xubuntu, a Linux distribution derived from Ubuntu, appears to have been compromised by...
Latest news
The Tor Project has recently released Tor Browser v15.0a4, an update that introduces numerous routine bug fixes...
WinRE, short for Windows Recovery Environment, is a dedicated system recovery mode that users access when encountering...
The Microsoft BitLocker disk encryption mechanism combines software-based algorithms with hardware-level encryption protocols to secure all data...
Amazon Web Services (AWS), the cloud-computing arm of Amazon, suffered a major service outage on Monday morning,...
X—formerly known as Twitter—has announced the launch of a new experimental feature that changes how links open...
According to Bloomberg journalist Mark Gurman in his latest Power On newsletter, Apple’s internal engineers have expressed...
In today’s digital age, businesses depend heavily on technology to operate efficiently, but that reliance also introduces...
The developers of Squid, the widely used open-source caching proxy for web traffic acceleration, have disclosed and...
Cybersecurity researchers at Koi Security have discovered the world’s first self-propagating malware targeting VS Code extensions on...
initially disclosed in a security advisory update on September 5, 2023, this vulnerability carries a chilling CVSS score of 8.8
CVE-2023-7216 could allow a remote, unauthenticated attacker to orchestrate a scenario where an unsuspecting user
A new, sophisticated attack campaign, dubbed STEADY#URSA, has emerged, casting a long shadow over the cybersecurity defenses of Ukraine's military
Assigned a CVSS score of 9.8, CVE-2024-23917 falls into the critical category, signaling a high risk of exploitability and impact
In November 2023, a new and sinister threat emerged: ResumeLooters, a malicious gang that set its sights...
APT-K-47 has quickly garnered attention for its sophisticated cyber-attack techniques, which bear similarities to other notorious APT groups
CVE-2023-6989 allowed for the inclusion of PHP files on a server by an unauthenticated attacker, leading to the execution of arbitrary PHP code
The vulnerabilities, encompassing a range of out-of-bounds write issues (CVE-2023-6229 through CVE-2023-6234 and CVE-2024-0244)
CVE-2024-0031 stands out for its potential to allow attackers to execute malicious code remotely on a victim's device
Discover how it retrieves script.py (the info-stealer), Document.zip (Python 3.11 with required libraries), and bypass.vbs (the Python executor)
CVE-2024-23108 and CVE-2024-23109 could potentially allow remote, unauthenticated attackers to execute unauthorized commands
Nevada Ransomware, identified by Resecurity’s threat research and intelligence team, is rapidly gaining notoriety for its advanced...
CVE-2024-1143 has been rated with the maximum severity score of 10.0, classifying it as Critical—the highest level of urgency.
ESET has uncovered a startling revelation: a series of Android espionage apps bundled with the VajraSpy remote access trojan (RAT)
A researcher has published a proof-of-concept (PoC) tool for a kernel vulnerability, CVE-2024-23208 remedied in iOS 17.3
CVE-2024-25089 is a critical security vulnerability discovered in Malwarebytes Binisoft Windows Firewall Control before version 6.9.9.2
CVE-2024-21399 (CVSS 8.3): there have been no confirmed instances of exploitation or disclosure of this vulnerability.
Notably, DiceLoader has been actively used since 2021, with the malware often delivered via a PowerShell script.
Unit 42 researchers stumbled upon Mispadu Stealer's latest variant while hunting for the SmartScreen CVE-2023-36025 vulnerability.
The compromised data included access credentials belonging to both individual consumers and enterprises, unlocking the AnyDesk customer portal
The consequences of CVE-2023-31505 are significant. This vulnerability affects the latest version of Schlix CMS, specifically version v2.2.8-1
The PoC code not only exposes CVE-2024-21893 but also enables attackers to chain it with CVE-2024-21887, allowing for unauthenticated RCE