Latest news
CVE-2024-20674 in Windows Kerberos could enable an unauthenticated attacker to execute a machine-in-the-middle (MitM) attack
This vulnerability, designated as CVE-2023-47211, carries a high-severity rating of 9.1 on the Common Vulnerability Scoring System scale
Victims of the Babuk Tortilla variant can now access the updated Avast Babuk decryptor through the NoMoreRansom website
CVE-2023-51409 was so critical that it received a Common Vulnerability Scoring System score of 10, indicating the highest level of severity.
CVE-2024-0193 is capable of being exploited by local adversaries to escalate privileges and execute arbitrary code
A cunning stratagem employed by a threat group, exploiting YouTube channels to disseminate a variant of the notorious Lumma Stealer malware.
SentinelOne, a security research organization, demonstrated this by creating a proof-of-concept attack using a maliciously crafted npm package
Revealing how malicious actors are using YouTube, a platform trusted for legitimate content, to distribute cryptocurrency miners.
The report is a comprehensive examination of the vulnerabilities inherent in AI and machine learning (ML) systems.
CYFIRMA Industries Report offers an illuminating look into the current state of cyber threats, in the professional goods & services industry
The vulnerability, identified as CVE-2024-21633 (CVSS 7.8), exists in the apktool, a component of the MobSF.
Dubbed 'Operation Japan,' this campaign unfolds against the backdrop of Japan's controversial decision to release treated water
QiAnXin Threat Intelligence Center's detailed analysis linked the binary involved in this operation to a North Korean APT
The Turkish espionage campaigns in the Netherlands represent a significant shift in the landscape of international cyber warfare
The technical details and a PoC exploit of CVE-2023-39296 were unveiled by an independent security researcher, DCS
The CVE-2024-21633 (CVSS 7.8) vulnerability allows an attacker to write or overwrite any file to which the user has access.
Among the myriad of threats, GuLoader and RedLine Stealer stand out for their sophisticated anti-analysis techniques.
CVE-2023-39475 & CVE-2023-39476 allow remote attackers to execute arbitrary code on affected systems, bypassing any need for authentication
Another critical vulnerability, identified as 'GHSA-76cc-p55w-63g3', was found in Teleport's version 14 access list feature
Ducktail began its infiltration through a seemingly innocuous channel – LinkedIn. The attackers sent a private message to the target
The vulnerability, tagged as CVE-2023-39336 (CVSS 9.6), posed a significant risk in the form of a remote code execution (RCE) flaw