Do Son
Oracle has issued an emergency Security Alert Advisory for a newly discovered vulnerability affecting Oracle E-Business Suite,...
Latest news
FortiGuard Labs has identified a new and active Stealit malware campaign that abuses the Node.js Single Executable...
Forescout Research has uncovered a disturbing new tactic among pro-Russian hacktivists — fabricating real-world critical infrastructure attacks...
A critical security flaw has been discovered in Cherry Studio, a cross-platform desktop client that supports multiple...
Microsoft Threat Intelligence has issued a warning about a financially motivated campaign conducted by a threat actor...
A critical authentication bypass vulnerability has been discovered in Better Auth, a popular framework-agnostic authentication and authorization...
Trend Micro’s Threat Research team has uncovered a serious cloud credential exposure involving Axis Communications, a leading...
Researchers from Kandji’s Threat Intelligence team uncovered a malware campaign targeting macOS users through spoofed Homebrew installer...
GreyNoise Intelligence has issued an alert about a massive coordinated botnet operation targeting Remote Desktop Protocol (RDP)...
The eSentire Threat Response Unit (TRU) identified a new Rust-based backdoor—dubbed ChaosBot—deployed inside a financial services organization’s...
Storage virtualization is revolutionizing how businesses used to manage and store their ever-growing data. Put simply, it...
CVE-2023-51443, with a CVSS score of 7.5, exposes FreeSWITCH to DoS attacks during the delicate handshake phase of the DTLS protocol
The campaign unfolded stealthily, leveraging the relatively new Nim programming language to construct a malicious backdoor
Europol undertook a concerted effort to notify 443 online retailers about the compromise of their customers' payment card data
At present, Ubisoft is reluctant to disclose detailed information about this data breach. Several days have elapsed since the incident
A new attack technique named SMTP Smuggling has emerged, threatening the integrity of email communication worldwide.
CVE-2023-51713 exposes a dangerous out-of-bounds buffer read issue in ProFTPD's make_ftp_cmd. This flaw affects version before 1.3.8a
Cyber threat actor UAC-0099 has been actively targeting Ukraine since mid-2022, according to insights from the Deep Instinct Threat Lab
CVE-2023-51385 security vulnerability, with a CVSS score of 9.8, threatened the very core of its secure channel operations.
Tracked as CVE-2023-50254 and scoring a concerning 8.2 on the CVSS scale, this is classified as a file overwrite vulnerability.
Android/Xamalicious has been embedded in about 25 different apps, some of which were distributed on Google Play since mid-2020
Researchers issued CVE-2023-42465 for SUDO for this vulnerability. This flaw classified as critical has been found in sudo up to 1.9.14.
ThreatFabric detected "Chameleon," a banking trojan first identified in early 2023. This malicious entity, thriving in the digital ecosystem
BattleRoyal cluster is notable for its diverse attack chains designed to deliver malware efficiently. DarkGate serves as the gateway
A member of the notorious international hacking collective Lapsus$ was apprehended in the United Kingdom at the tender age of 18
The 2023 Payment Fraud Intelligence Report unveils a concerning resurgence in the payment fraud landscape.
In the ever-evolving landscape of cyber threats, MageCart malware emerges as a formidable foe, especially for WordPress users
Akira ransomware group exemplifies the evolving nature of cyber threats. Their ability to adapt tactics, from encryption-based ransomware
Cisco Talos's in-depth analysis unveils the stealth and persistence of Intellexa's infamous Predator spyware
In 2024, the cyber threat landscape is not just a technical challenge; it is a test of our collective resilience and adaptability.
MetaStealer found its way into systems primarily through malspam and cracked software distributed via hijacked YouTube accounts.
The X.Org Server and XWayland have released updates to address two significant vulnerabilities: CVE-2023-6377 and CVE-2023-6478