Do Son
Broadcom has released patches addressing three vulnerabilities in VMware Aria Operations and VMware Tools, with severities ranging...
Latest news
Independent researcher Strey Paws has published an in-depth analysis of CVE-2024-38399, a race condition in Qualcomm’s KGSL...
The Stormshield Cyber Threat Intelligence (CTI) team has uncovered new phishing infrastructure tied to APT35, also known...
The UK’s National Cyber Security Centre (NCSC) has released a detailed malware analysis report exposing RayInitiator and...
A new analysis from Silent Push Threat Analysts highlights the growing misuse of publicly rentable subdomain providers,...
The cybercriminal underground is witnessing a dramatic shift with the emergence of Acreed, a new infostealer that...
A new Malware-as-a-Service (MaaS) offering, dubbed Olymp Loader, is rapidly gaining traction in underground markets. First spotted...
In response to recent concerns over scratches observed on iPhone 17 Pro display units, Apple, after clarifying...
Tesla CEO Elon Musk has once again underscored the strategic importance of the company’s humanoid robot, Optimus,...
cybernewswire
Singapore, Singapore, 29th September 2025, CyberNewsWire
Amadey Trojan is a modular botnet with capabilities to circumvent internal network defenses, remotely control infected systems
ESET have reported a deliberate dismantling of the Mozi botnet, which had infiltrated over a million Internet of Things devices worldwide
The vulnerability, CVE-2023-20048, has a CVSS score of 9.9, making it one of the most severe security vulnerabilities ever discovered
those behind the service use .US for 55% of their domain registrations, with dozens of new malicious .US domains being registered daily
Arid Viper has inaugurated an espionage operation, leveraging a counterfeit dating application tailored for Android devices aimed at Arabic-speaking users
Most malware on NuGet embeds malicious code within initialization and post-installation PowerShell scripts.
F5 has issued an urgent warning to organizations about the active exploitation of two critical security vulnerabilities in BIG-IP
The most critical among them is CVE-2023-31027, which boasts a CVSS score of 8.2 out of a potential 10, indicating a high level of danger
CVE-2023-5043 and CVE-2023-5044, stem from insufficient input validation and could lead to arbitrary code execution
Cl0p gained access to the email addresses of approximately 632,000 employees from the U.S. Department of Defense and Justice
Canadian government announced a prohibition on the installation of the Chinese messaging app WeChat and Kaspersky
Cybersecurity experts have uncovered an attack technique targeting corporate Slack users, aptly termed 'Wiki-Slack.'
Unit 42 division has identified and are closely monitoring the progression of a malevolent campaign dubbed EleKtra-Leak
CVE-2023-3959 allows attackers to execute arbitrary code on the devices, which could allow them to take complete control of the devices
An attacker could exploit CVE-2023-20886 to redirect a victim to a malicious website that is designed to steal their SAML response
CVE-2023-47174 is a critical bug in Thorn SFTP Gateway that could allow an attacker to execute arbitrary code on SFTP Gateway server
Atlassian has rated the CVE-2023-22518 vulnerability as 9.1/10 severity on the Common Vulnerability Scoring System (CVSS)
Knight is believed to have evolved from its predecessor, "Cyclops," which had the capability to infect Windows, Linux, and Mac OS
Malwarebytes Labs has unveiled a case where malvertising was entirely unintentional, the result of a confluence of compromised website content
The adoption of the Forked IcedID variant in these campaigns stands out due to its rare use in cyberattacks.
warnings about a fresh wave of attacks targeting Chinese internet users, orchestrated by the hacker collective known as Higaisa
The Protective Domain Name Service obstructs access to domains recognized as malicious by actively blocking them