Do Son
A research team from ETH Zurich has disclosed a critical vulnerability — CVE-2025-0033, dubbed RMPocalypse — that...
Latest news
Seqrite Threat Research Labs has uncovered a targeted phishing campaign in Spanish designed to trick Colombian users...
The Socket Threat Research Team has uncovered a growing trend among malicious package developers: leveraging Discord webhooks...
A newly formed cybercrime consortium known as Scattered Lapsus$ Hunters (SLSH) — also dubbed the “Trinity of...
The McAfee Threat Research team has uncovered a new and sophisticated Astaroth malware campaign — using GitHub...
The long-rumored foldable iPhone — tentatively referred to as the iPhone Fold — has yet to be...
As generative AI applications continue to expand, the Massachusetts Institute of Technology’s (MIT) Computer Science and Artificial...
The latest version of Copilot on Windows (version 1.25095.161.0) introduces a new feature called “Connector,” which can...
According to a report from Bloomberg News, Apple is expected to unveil two to three new products...
With the official launch of AirPods Pro 3 last month, the market had widely anticipated that Apple...
The Turkish espionage campaigns in the Netherlands represent a significant shift in the landscape of international cyber warfare
The technical details and a PoC exploit of CVE-2023-39296 were unveiled by an independent security researcher, DCS
The CVE-2024-21633 (CVSS 7.8) vulnerability allows an attacker to write or overwrite any file to which the user has access.
Among the myriad of threats, GuLoader and RedLine Stealer stand out for their sophisticated anti-analysis techniques.
CVE-2023-39475 & CVE-2023-39476 allow remote attackers to execute arbitrary code on affected systems, bypassing any need for authentication
Another critical vulnerability, identified as 'GHSA-76cc-p55w-63g3', was found in Teleport's version 14 access list feature
Ducktail began its infiltration through a seemingly innocuous channel – LinkedIn. The attackers sent a private message to the target
The vulnerability, tagged as CVE-2023-39336 (CVSS 9.6), posed a significant risk in the form of a remote code execution (RCE) flaw
Kimsuky, has unleashed a sophisticated spearphishing campaign, targeting hundreds of influential individuals globally
Tagged with an 'important' severity rating, CVE-2023-51784 is a Remote Code Execution (RCE) vulnerability in Apache InLong Manager
GXC Team has enhanced its capabilities for automated operations, targeted social engineering, and bypassing cybersecurity measures
The Python community has recently faced a new threat: three new malicious PyPI packages that deploy CoinMiner on Linux devices
At the heart of the UAC-0050 threat group's arsenal is RemcosRAT, a malware for remote surveillance and control.
With a CVSS score of 8.6, this vulnerability exposes a chink in the armor of many websites, leaving them vulnerable to unauthenticated attacks
Advent of scheduled task tampering as a persistence mechanism underscores the need for continuous evolution in threat-hunting
PoC code has been released for iOS and macOS vulnerability, CVE-2023-41974, that can be chained to take full control of a mobile device
Both vulnerabilities, identified as CVE-2023-48419 and CVE-2023-6339, carry the maximum severity rating with a CVSSv3 score of 10.
The first vulnerability addressed by the patches is CVE-2023-48418, carrying the highest severity rating with a CVSSv3 score of 10
Classified as critical, CVE-2023-4677 allows attackers to execute arbitrary commands on all connected agents, leading to mass compromise.
The agency recently added two significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog
PoC code has been released for a zero-day iOS vulnerability (CVE-2023-32434) that can be chained to take full control of a mobile device.
CVE-2023-33025 (CVSS 9.8): This vulnerability, rooted in memory corruption during non-standard SDP bodies in VOLTE calls