Do Son
The notorious Israeli commercial spyware developer NSO Group has confirmed that it has been acquired by a...
Latest news
Socket’s Threat Research Team has uncovered a massive supply-chain abuse campaign leveraging npm’s public registry and unpkg.com’s...
cybernewswire 
Security researcher Chino Kafuu details a flaw buried deep within the Transport Layer Security (TLS) subsystem of...
For certain advanced users and developers, unlocking the Android operating system on their smartphones is a common...
Google Threat Intelligence Group (GTIG) and Mandiant have jointly disclosed an extensive data theft and extortion campaign...
Huntress has sounded the alarm over active exploitation of a newly discovered Local File Inclusion (LFI) vulnerability...
NVIDIA has released an important software security update for its GPU Display Driver, addressing multiple vulnerabilities that...
Trend Micro has uncovered a rapidly expanding botnet campaign dubbed RondoDox, which is targeting a wide spectrum...
Cisco Talos has confirmed that ransomware operators are now abusing Velociraptor, an open-source digital forensics and incident...
CVE-2023-6817, poses a severe threat with a CVSS score of 7.8, categorizing it as a high-severity issue, also PoC exploit published.
Rooted in a flaw within the "file upload logic" of AEM Forms on JEE versions 6.5.19.0 and earlier, this flaw paves the way for unauthorized path traversal
AnyDesk is installed using Netcat, allowing attackers to control the system's screen remotely, bypassing security products
CVE-2023-48795 (Terrapin Attack) revolves around the manipulation of sequence numbers during the SSH handshake process.
Shakeeb Ahmed, has admitted his guilt in hacking two decentralized cryptocurrency exchanges and stealing digital assets valued at over $12.3 million.
Microsoft has issued a warning about the escalating activities of the cybercriminal group Storm-0539, which specializes in gift card fraud
The complete PoC exploit source code for CVE-2023-22524 is available on GitHub, providing a detailed blueprint of this vulnerability
These malware entities, targeting 1103 traditional banking apps and a growing number of FinTech and Trading apps
In light of this incident, MongoDB recommends that all clients remain vigilant against social engineering and phishing attacks
CVE-2023-6553 flaw's discovery and the subsequent publication of a technical write-up, coupled with the release of a PoC exploit code
Identified as CVE-2023-49954, this security loophole is an SQL Injection flaw found in 3CX CRM Integration.
IDEMIA recently issued an advisory that highlights critical vulnerabilities in its Access and Time Biometric Terminals.
A PoC exploit for SharePoint Pre-Auth Code Injection RCE chain has been released for two vulnerabilities (CVE-2023-29357 & CVE-2023-24955)
CVE-2023-45849 is a RCE vulnerability with a CVSS score of 10.0, allowing unauthenticated attackers to commandeer systems as LocalSystem
In the dynamic theater of cyber warfare, a new front has opened – the struggle against malicious stockpiled domains.
The malvertising campaign associated with PikaBot particularly targets Google searches for the remote application AnyDesk.
Iranian government-sponsored group OilRig deployed three distinct malicious software loaders in 2022 to maintain persistent access
Ledger has cautioned its clients about the risks associated with using dApps, due to a detected supply chain attack.
Storm-1152 group's operations yielded "millions of dollars in illicit revenue," costing the company and other victims even more to combat their crimes
A sinister coalition has emerged, uniting three formidable ransomware gangs - BianLian, White Rabbit, and Mario - in a spree of cyber-extortion
CVE-2023-33107, an integer overflow in KGSL IOMMU SVM memory management can lead to memory corruption in the Graphics Linux kernel during IOCTL call
CVE-2023-35628 allows a remote, unauthenticated attacker to execute arbitrary code on the victim's system.