Latest news
Qualcomm Antitrust Trial Begins: UK Consumer Group Seeks £480 Million for Inflated Smartphone Prices
The emergence of Persian Remote World and its suite of malicious tools like Persian Loader and RATs underscores a significant threat
Phobos ransomware has exploited the credibility of VX-Underground, weaving a deceptive web to entrap its victims.
NCSC and NIS are issuing warnings about the escalating frequency and complexity of North Korean attacks on software supply chains.
Approximately $9 million in Tether stablecoin was seized from fraudsters who were pilfering funds from victims through romance scams
Researchers discovered a DLL file identified as "hrserv.dll," representing a previously unknown web shell with advanced capabilities
Blackwing Intelligence has unearthed several vulnerabilities that enable circumvention of the Windows Hello authentication system
CVE-2023-49103 (CVSS score of 10) Disclosure of sensitive credentials and configuration in containerized deployments
CVE-2023-41913 is a critical security vulnerability that could allow remote attackers to execute arbitrary code on affected systems
Researchers from the Bangladesh University of Engineering have introduced a novel tool for APT detection named LogShield
North Korean IT specialists have orchestrated an extensive fraudulent operation to secure employment in leading Western technology companies
A novel phishing technique, Quishing (a blend of QR and phishing), involves concealing malicious links within QR codes.
G Data has uncovered a novel variant of the malicious software Agent Tesla, delivered via a bait file in the ZPAQ compression format
SonarSource have disclosed technical details for CVE-2023-36742 and a public proof-of-concept (PoC) exploit
NetSupport RAT most commonly infiltrates a victim’s system through deceptive websites and bogus browser updates.
Amazon continued to sell these compromised devices until February 2023. In both cases, the same Corejava malware was detected.
CVE-2023-37924 allows malicious actors to bypass login authentication, potentially leading to unauthorized access to sensitive data
CVE-2023-22521 poses a significant threat to organizations utilizing Crowd, warranting immediate attention and remediation.
This high-severity flaw, identified as CVE-2023-22516, allows an authenticated attacker to execute arbitrary code on the affected system
A severe security vulnerability, identified as CVE-2023-4149, has been discovered in the WAGO Industrial Managed Switch
LockBit 3.0, an advanced ransomware, has been exploiting a critical vulnerability dubbed "Citrix Bleed" (CVE-2023-4966)