Do Son
For certain advanced users and developers, unlocking the Android operating system on their smartphones is a common...
Latest news
Google Threat Intelligence Group (GTIG) and Mandiant have jointly disclosed an extensive data theft and extortion campaign...
Huntress has sounded the alarm over active exploitation of a newly discovered Local File Inclusion (LFI) vulnerability...
NVIDIA has released an important software security update for its GPU Display Driver, addressing multiple vulnerabilities that...
Trend Micro has uncovered a rapidly expanding botnet campaign dubbed RondoDox, which is targeting a wide spectrum...
Cisco Talos has confirmed that ransomware operators are now abusing Velociraptor, an open-source digital forensics and incident...
MediaTek has released its October 2025 Product Security Bulletin, disclosing a set of high- and medium-severity vulnerabilities...
Security researchers from Expel have discovered a new phishing campaign that creatively blends social engineering with browser...
Researchers from Palo Alto Networks Unit 42 have discovered a new phishing trend where attackers trick victims...
Security researcher Rocco Calvi detailed a critical flaw in the TP-Link AX1800 WiFi 6 Router (Archer AX21/AX20)...
Interpol announced that the international law enforcement operation "Operation HAECHI IV," aimed at combating financial crimes online
The Konni group leveraged LNK files, essentially commonplace Windows shortcuts increasingly used by various threat actors,
CVE-2023-49734 vulnerability allows a lower-privileged user, or 'Gamma user,' to gain undue control over chart permissions.
Sophos X-Ops warns that the "Inhospitality" malspam campaign represents a cunning blend of social engineering and malware
the Iranian espionage group Seedworm (also known as Muddywater) has emerged as a sophisticated and elusive adversary
GitHub Gists Abuse: This technique involves using GitHub Gists, a feature for sharing code snippets, to host two-stage malicious payloads.
The Smishing Triad Gang's ability to adapt and refine its tactics poses a significant challenge to cybersecurity efforts globally.
The leak includes files of prototypes and beta versions of applications and games released through TestFlight
CVE-2023-6817, poses a severe threat with a CVSS score of 7.8, categorizing it as a high-severity issue, also PoC exploit published.
Rooted in a flaw within the "file upload logic" of AEM Forms on JEE versions 6.5.19.0 and earlier, this flaw paves the way for unauthorized path traversal
AnyDesk is installed using Netcat, allowing attackers to control the system's screen remotely, bypassing security products
CVE-2023-48795 (Terrapin Attack) revolves around the manipulation of sequence numbers during the SSH handshake process.
Shakeeb Ahmed, has admitted his guilt in hacking two decentralized cryptocurrency exchanges and stealing digital assets valued at over $12.3 million.
Microsoft has issued a warning about the escalating activities of the cybercriminal group Storm-0539, which specializes in gift card fraud
The complete PoC exploit source code for CVE-2023-22524 is available on GitHub, providing a detailed blueprint of this vulnerability
These malware entities, targeting 1103 traditional banking apps and a growing number of FinTech and Trading apps
In light of this incident, MongoDB recommends that all clients remain vigilant against social engineering and phishing attacks
CVE-2023-6553 flaw's discovery and the subsequent publication of a technical write-up, coupled with the release of a PoC exploit code
Identified as CVE-2023-49954, this security loophole is an SQL Injection flaw found in 3CX CRM Integration.
IDEMIA recently issued an advisory that highlights critical vulnerabilities in its Access and Time Biometric Terminals.
A PoC exploit for SharePoint Pre-Auth Code Injection RCE chain has been released for two vulnerabilities (CVE-2023-29357 & CVE-2023-24955)
CVE-2023-45849 is a RCE vulnerability with a CVSS score of 10.0, allowing unauthenticated attackers to commandeer systems as LocalSystem