Latest news
As of January 17, 2024, VMware has reported evidence that the CVE-2023-34048 RCE bug is currently being exploited in attacks
Slippy-Book, identified as CVE-2023-44451 for Xreader and CVE-2023-52076 for Atril, targets the very core of file parsing in Linux’s prominent document
A key discovery in Volexity's investigation was the GIFTEDVISITOR webshell. Over 1,700 compromised Ivanti Connect Secure VPN devices
The NETSCOUT ASERT team has recently unearthed alarming patterns of behavior indicative of an upsurge in malicious botnet activities
CVE-2023-35636 is a security vulnerability found in Microsoft Outlook, specifically in the calendar sharing function.
7777-Botnet is known to exploit a range of vulnerabilities in various devices, including TP-Link routers, Xiongmai devices, and Hikvision cameras
Assigned a base score of 9.8 on the Common Vulnerability Scoring System, the CVE-2023-50643 vulnerability is classified as "Critical."
Further investigation revealed that this JSP code was from an open-source web shell known as the Godzilla Webshell.
Check Point Research has exposed a large-scale, sophisticated NFT scam campaign, marking a new era in digital asset fraud
SPICA backdoor represents a significant advancement in COLDRIVER's capabilities, marking its first foray into custom malware development
the digital underworld witnessed the reemergence of TA866, a formidable threat in the realm of email-based cyber-attacks
Cado Security Labs researchers have uncovered a striking and innovative campaign that specifically targets vulnerable Docker services
Mimus ransomware employs AES-256 encryption, changing file extensions to ".encrypted" and generating ransom notes with Bitcoin wallet
The AhnLab Security Intelligence Center has uncovered that the LockBit ransomware is being spread through malicious Word files
A critical flaw, CVE-2024-22406 with a CVSS score of 9.3, poses a serious threat to businesses relying on this popular open-source platform
Remcos RAT malware communicates with a remote IP address and initiates malicious activities, including keylogging and capturing screenshots
Mint Sandstorm campaign's modus operandi includes innovative post-intrusion techniques, such as deploying a custom backdoor named MediaPl
Siemens fixes two critical vulnerabilities (CVE-2023-51438 and CVE-2023-49621) in their SIMATIC IPC and SIMATIC NC 4100 products
Atlantida stealer is not only adept at capturing entire screen contents but also targets specific data sources.
Kaspersky has released an open-source script, iShutdown, designed for rapid detection of spyware infections in iOS devices.
tracked as CVE-2018-15133 (CVSS score: 8.1), the vulnerability has been described as a deserialization of untrusted data vulnerability