Security researchers from xlab-qianxin detected Mirai.TBOT, a variant of the original Mirai, operates with distinct characteristics
Their research has refined the classic DLL Search Order Hijacking technique, leveraging executables in the trusted WinSxS folder of Windows OS
Deepin-Compressor, the default archive manager for the Deepin Linux OS, has been identified as having a path traversal flaw- CVE-2023-50255
PoC exploit code has been made available for a recently disclosed flaw, CVE-2023-50226 (CVSS 7.8), impacting Parallels Desktop
A recent discovery has cast a shadow over its robustness – the CVE-2023-7163 vulnerability, a critical flaw with a maximum CVSSv3 score of 10
These actors have been utilizing the ms-appinstaller protocol handler as a vector for malware, potentially leading to ransomware distribution
A moderate severity flaw, this vulnerability lurked in the shadows of Apache OpenOffice and LibreOffice, where embedded content
CVE-2023-49299 security vulnerability allows an authenticated user to execute arbitrary, unsandboxed JavaScript on the server.
Ateam Inc., disclosed that 935,779 personal data records stored in their cloud service were accessible over the Internet.
Panasonic Avionics Corporation, revealed that they suffered a cyberattack at the end of 2022, which may have led to the leak of personal information
Central to Kimsuky's operations is AppleSeed, a backdoor malware that facilitates remote system control. It can execute commands
In the firmware versions v3.3 and earlier of the ioLogik E1200 Series, a menacing vulnerability was lurking, codenamed CVE-2023-5961
Recent revelations from Palo Alto Networks have cast a spotlight on two specific vulnerabilities within Google Kubernetes Engine
The cybercriminal community in the shadowy realms of the Dark Web orchestrated their chilling celebration - "Leaksmas."
CVE-2023-41990 was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3
Carbanak malware, previously utilized for stealing banking data, is now employed by the cybercriminal group FIN7 for remote control
NASA has released the edition of a guide on best practices for cybersecurity in space, as announced in a press release on the website
JaskaGO malware checks whether it is operating on a virtual machine, and if so, performs a harmless task, like pinging Google, to avoid detection
This flaw, identified as CVE-2023-47565 and rated with a concerning CVSS v3 score of 8.0, reveals a significant gap in network security
CVE-2023-45741 allows an authenticated remote attacker to exploit the router by injecting arbitrary commands into the operating system
CVE-2023-51467 enables pre-authentication RCE, allowing attackers to bypass authentication mechanisms and directly perform SSRF attacks
In the vast expanse of the digital ocean, a new wave of cyber attacks has emerged, targeting the seemingly unassuming Linux SSH servers.
Do Son 
