Latest news
This vulnerability, known as CVE-2023-47113, exposes users to the risk of DLL Search Order Hijacking attacks.
The ad, designed to attract Windows aficionados seeking the CPU-Z tool, is a trapdoor to malware.
In the wake of these findings, Deep Instinct has unearthed additional suspected MuddyC2Go servers at Stark Industries
The zero-day flaw, CVE-2023-47246, resides in SysAid on-premises software, allowing hackers to execute arbitrary code on vulnerable systems
CVE-2023-29552 has already been added to the KEV catalog by CISA highlighting the active exploitation of this vulnerability by threat actors.
Kaspersky Lab has illuminated the cyber threats lurking in the shadows, preying upon the enthusiasts of computer gaming
CVE-2023-39913 arises from the deserialization of untrusted data, specifically Java-serialized CAS objects, without proper input validation
Marina Bay Sands luxury resort and ca*sino in Singapore has disclosed a data breach incident affecting the personal data of 665,000 customers.
A sophisticated espionage operation orchestrated by Chinese APT groups under the guise of innocuous cloud backup services
The GootBot implant is purpose-built for lateral movement, using scripts that can quickly propagate the payload across the network
Jamf Threat Labs has recently uncovered a discreet, yet potent, malware variant tied to the notorious BlueNoroff APT group
CVE-2023-42659 and carrying a CVSS score of 9.1, allows authenticated Ad Hoc Transfer users to upload files to arbitrary locations
CISA warned network administrators to immediately patch their Atlassian Confluence Data Center and Server installations against a critical severity flaw
cybersecurity study has exposed the machinations of "SecuriDropper," a malicious product exemplifying the burgeoning dropper-as-a-service trend
Mr. Cooper, has proffered alternative repayment methods to its clientele following a cyberattack that transpired on October 31st.
The VMware Carbon Black team has documented a new surge in attacks by the information-stealing Jupyter infostealer
The Iranian-backed APT group, Agonizing Serpens, employed an array of wipers to obliterate traces and disable the infected endpoints
establish a special consultative body to synchronize efforts in cybersecurity, particularly in countering the cyber activities of North Korea
Google has alerted to the risk posed by the potential misuse of its proprietary Calendar service as a C2 infrastructure for managing malicious software
Kinsing have escalated their exploitation of a vulnerability discovered, referred to as Looney Tunables, to orchestrate incursions into cloud environments