Latest news
SentinelLabs unraveled a campaign orchestrated by ScarCruft threat actor targeting media organizations and experts on North Korean affairs
This repository has become a battleground against an insidious form of cyber threat: info stealing malware packages
CVE-2024-0204 (CVSS 9.8), this flaw is described as an authentication bypass vulnerability in Fortra's GoAnywhere MFT before version 7.4.1
CVE-2024-23222 lies within WebKit, and if exploited, could allow threat actors to execute arbitrary malicious code on unpatched devices.
CVE-2024-22233 (CVSS 7.5) allows an attacker to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition
The discovery of CVE-2023-5716 is described as an arbitrary file-write vulnerability that strikes at the heart of its operational integrity.
the researchers have created a nuclei template to detect CVE-2023-22527, CVSS score of 10.0, signifies maximum severity
This staggering figure includes full names, birthdates, ID card numbers, and phone numbers, purportedly siphoned from vaccine registration records
These repackaged applications, laced with a Trojan proxy and a post-install script, mark the first step in a meticulously planned infection process.
Poc releases a security flaw, CVE-2024-0517, in Google Chrome that could be exploited by threat actors to achieve remote code execution.
This JAVA-based stealer is not just a simple data thief. It's designed to perform a range of malicious activities, from capturing screenshots
Security researchers have brought to light a significant flaw in pyLoadβ CVE-2024-22416, a vulnerability with a high CVSS score of 9.6
This campaign, characterized by its use of the SmokeLoader malware, marks a significant uptick in cyberattacks against Ukraine.
Parrot TDS operates by embedding two types of scripts into web pages: a landing script that profiles potential victims and a payload script
Duarte Santos uncovered a critical vulnerability, CVE-2023-50447, that could potentially allow attackers to execute arbitrary code.
Jamf Threat Labs researchers Ferdous Saljooki and Jaron Bradley discovered a new macOS malware campaign lurking within pirated software
Zloader's journey from a banking trojan to a vehicle for ransomware attacks mirrors the adaptability of cyber threats.
A critical vulnerability, identified as CVE-2023-40051 (CVSS 9.1), has been spotlighted within several iterations of the PASOE
The subsequent investigation unveiled a sophisticated RAT deployment masquerading as a standard Microsoft update process.
Chae$ 4.1 malware uses deceptive websites and compromised sites to distribute its payload, showcasing the attackers' adaptability
Midnight Blizzard employed a password spray attack to breach a legacy non-production test tenant account within Microsoft's corporate systems
Users employing these versions are unwittingly exposed to CVE-2024-21733 which could potentially leak sensitive information.