Latest news
Security researchers have deconstructed the patch released by Microsoft and crafted a PoC exploit for the CVE-2023-36025 vulnerability.
Synology has recently addressed critical security vulnerabilities affecting its Synology Camera BC500 and TC500 models
Mobile banking trojan infections can significantly endanger users' personal and financial security. Awareness of the risks and common tactics
This dropper then fetches and executes either DarkGate or PikaBot malware, marking the successful infection of the user's machine
The Rhysida ransomware gang has claimed responsibility for the extensive cyberattack on the British Library in October of this year.
a cornerstone of Microsoft's cybersecurity strategy, awarding over $60 million to security researchers across 70 countries
DLL Sideloading is used to run a malicious DLL library, while the genuine WinSCP installer serves as a smokescreen for the deceit.
Hackers disseminated phishing emails containing Remcos RAT attachments disguised as PDF files, sent by the Security Service of Ukraine
This communication, articulated in Chinese, English, Russian, and Korean, entailed an offer of a $10 million reward for the return of the stolen assets
CVE-2023-46604 is being used to infiltrate Linux systems with the Kinsing malware, culminating in a nefarious cryptocurrency mining operation
FCC of the United States has announced the adoption of new regulations aimed at curbing SIM card swapping fraud
Linux Kernel 6.6 version will be a Long-Term Support (LTS) release, with support extending until December 2026.
A critical remote code execution (RCE) vulnerability, designated as CVE-2023-46302, has been discovered in Apache Submarine
Israeli hacker-for-hire Aviram Azari was sentenced in the Southern District of New York to 80 months of incarceration for orchestrating
Disguised as popular business software, such as Slack or Cisco's VPN client AnyConnect, the malefactors distribute the Nitrogen malware,
The American agencies FBI and CISA have issued a joint warning regarding the activities of the hacker group Scattered Spider
cybersecurity researcher Yordan also released a proof-of-concept (PoC) exploit demonstrating the CVE-2023-2598 flaw's impact.
CVE-2023-48238 and assigned a CVSS score of 7.5, has the potential to enable malicious actors to launch JWT algorithm confusion attack
CVE-2023-36439 (CVSS score of 8.0) could enable attackers to install malicious software on an Exchange server
CVE-2023-26031 vulnerability allows local users to gain root privileges and potentially compromise sensitive data.
CVE-2023-2551 affects Oracle Fusion Middleware and allows unauthenticated attackers with network access to compromise WebLogic Server