Latest news
HiddenFace, a highly sophisticated backdoor malware developed by the MirrorFace APT group, represents a significant escalation
QuoIntelligence has uncovered a previously unknown and undetected variant of the WIREFIRE web shell, a Python-based implant
Albabat ransomware also replaces the desktop wallpaper with its own, further asserting its control over the compromised system.
The technical details and proof-of-concept (PoC) code targeting a critical CVE-2024-23897 vulnerability in Jenkins was published
Identified with a CVSS score of 8.3, CVE-2023-40547 exposes a remote code execution vulnerability within Shim.
This operation, driven by a financially motivated threat actor, utilizes a modified version of the open-source remote access tool, AllaKore RAT
These entities, operating under the veil of legitimate business, are conduits for Iran's cyber espionage and warfare efforts.
FAUST ransomware, emerging from the depths of cyber malfeasance, appends a ".faust" extension to each encrypted file
The Conditional QR Code Routing Attacks signify a new chapter in the cyber threat landscape, one where adaptability and innovation
The bug (tracked as CVE-2024-0402, CVSS 9.9) affects both GitLab Community Edition (CE) and Enterprise Edition (EE).
Dubbed CVE-2023-6933, this security flaw has been classified with a critical severity rating of 9.8 out of 10
NSPX30 implant, the arsenal of Blackwood, is a testament to the group's technical prowess. This is delivered through updates of legitimate software
Apache Superset has released fixes to fix a critical CVE-2023-49657 vulnerability that could lead to stored cross-site scripting attacks.
LODEINFO malware, a spearhead in the arsenal of the infamous APT group APT10, showcases the alarming evolution of cyber threats
This security flaw tracked as CVE-2024-20253 (CVSS score of 9.9) affects the Cisco products in the default configuration
At first glance, CherryLoader deceives with a veneer of innocence, masquerading as the legitimate CherryTree note-taking application
CVE-2024-23897, (CVSS 9.8), opens the door to arbitrary file reads through the CLI, potentially culminating in remote code execution (RCE).
The Danish Centre for Cyber Security (CFCS) is warning of increased ransomware activity, exploiting CVE-2023-20269, a vulnerability
In response to CVE-2024-0769, D-Link recommends retiring these products and replacing them with products that receive firmware
CVE-2024-0221 (CVSS 9.1) is a directory traversal vulnerability threatened to mar the integrity of the Photo Gallery plugin
The BianLian ransomware group, first identified in 2022, has quickly ascended the ranks to become one of the most formidable extortion groups
Researchers have illuminated the dark corners of npm, revealing two malicious packages that exploit GitHub's infrastructur