Latest news
AnyDesk, a widely used remote desktop software, recently announced a significant breach within its production environment
backdoor accounts - a tactic not limited to any single operating system but prevalent across both Windows and Linux environments
CVE-2024-23832 in the decentralized social networking platform Mastodon could be exploited to impersonate and take over any remote account
As investigators delve deeper into the labyrinthine world of the UAC-0027 hacking group, they have uncovered 486 IP addresses
Wordfence has sounded the alarm, reporting over 1,400 blocked attacks targeting CVE-2023-6700 in the past 24 hours alone
The final phase of the ApateWeb campaign, Layer 3, is where victims encounter the malicious payload. This payload can manifest as scareware
Dubbed CVE-2024-1072, this flaw was a gaping hole rated 8.2 out of 10 on the severity scale. This high rating underscored the potential havoc
This realm has now become the breeding ground for a more sinister threat: the macOS.Bkdr.Activator malware
There is no publicly available PoC exploit for CVE-2024-21833. Evidence from underground forums indicates active exploitation of this flaw
Discovered by vigilant researchers at Trend Micro, the second vulnerability remedied in this update was the RCE POP chain flaw
Elastic Security Labs uncovered a sophisticated cyber intrusion, dubbed REF0657, targeting a financial services organization in South Asia
CVE-2024-21626, a critical flaw in runc, allowed for a potential container escape, enabling unauthorized access to the host filesystem
As the tax season rolls in, so does the threat of cybercrime, and leading the charge in 2024 is the infamous TA576 threat actor
Apple has recently confronted a formidable challenge: a zero-day vulnerability within their groundbreaking product, the Apple Vision Pro
Orchestrated by the notorious APT28 group, this campaign was a masterclass in cyber deception and manipulation.
Recently, a significant vulnerability in ModSecurity versions 3.0.0 to 3.0.11, identified as CVE-2024-1019, has surfaced.
where cyber threats continually evolve, the rise of scripted ransomware marks a new era of digital extortion
If CVE-2024-21887 is used in conjunction with CVE-2023-46805, exploitation does not require authentication and enables a threat actor