Latest news
RCE Attack threats can be avoided with CVE-2023-49093. Upgrading to a secure version of HtmlUnit with XSLT FEATURE_SECURE_PROCESSING is the answer.
Revealed: 8 Aleos security vulnerabilities, including the Remote Code Execution (CVE-2023-40465) on versions prior to 4.17. Read the blog to find out more.
Designated as CVE-2023-6316, the security vulnerability received a CVSS score of 9.8, categorizing it as critical.
P2Pinfect, a cross-platform botnet that has recently gained notoriety for its sophisticated attack strategies and elusive nature.
The Kaspersky report unveils staggering figures: over 437 million malware-class attacks were launched from online resources globally
Check Point delve into the sophisticated world of Outlook attack vectors, revealing the silent but deadly threats that could be just a click away
The LUMMA malware operation begins with an attacker impersonating a financial services company, sending an email
A North Korean hacking organization known as Andariel has been wreaking havoc in the digital realm, stealthily infiltrating South Korean firms
The Bluesky ransomware was unleashed about 30 minutes post initial breach. Its deployment was chillingly efficient
Papercut privilege escalation security vulnerability still doesn't seem to be fixed on the current version (23.0.3)
The report, covering June to August 2023, documents over 3.3 million cyberattacks, equating to about 26 attacks per minute.
AeroBlade first came into the spotlight in September 2022, revealing a meticulously planned cyber espionage campaign.
CVE-2023-40626 stems from an issue in the language file parsing process, which could be manipulated to disclose environment variables.
It warns of a remote code execution vulnerability on the user's site, citing the non-existent CVE-2023-45124.
Contact Form 7, a popular WordPress plugin with over 5 million installations, has been found to harbor a vulnerability (CVE-2023-6449)
Researchers from Unit 42 at Palo Alto Networks have uncovered a new toolset being used in cyber attacks against organizations
A critical risk has surfaced within Google Workspace's Domain-Wide Delegation feature, as revealed by Unit 42 researchers at PaloAlto Networks
SugarGh0st is a customized variant of the infamous Gh0st RAT, which has been active for over a decade. Developed by a Chinese group
LogoFAIL vulnerabilities are not vendor-specific and impact devices and chips from a wide range of manufacturers, affecting UEFI firmware
APT29 orchestrated a malicious campaign employing counterfeit BMW advertisements, the Ngrok tool, and exploiting a vulnerability in WinRAR