Latest news
In summation, the HackerOne report underscores the profound influence of ethical hackers on the cybersecurity domain
Utilizing its distinctive ransomware, the Ragnar Locker group had been linked to assaults on significant infrastructural entities
CVE-2023-47090 could allow an attacker to gain access to a NATS.io server and send or receive messages without authorization
In the esteemed Clark County School District (CCSD) of Nevada, a cyberattack transpired, granting hackers unauthorized access to student data
Not only does it address CVE-2023-36563, but it also patches up two more zero-day vulnerabilities that hackers have been exploiting
The eminent aerospace conglomerate, Boeing, has found itself ensnared by the cyber malefactors of Lockbit
In the past, Pegasus spyware has been leveraged to compromise the mobile devices of journalists, human rights defenders, and diplomats
CVE-2023-46748 allows attackers with remote access to the configuration utility to view, add, modify, or delete information in a database
Lazarus group, with its sophisticated methods and unwavering motivations, continues to be a formidable adversary in the digital realm
APT28 has been assailing governmental entities, businesses, universities, research institutions, and analytical centers in France
To gauge the potential impact of CVE-2023-46604, Qi Anxin CERT replicated the Apache ActiveMQ remote code execution vulnerability
A local privilege escalation (CVE-2023-34057) bug has been discovered in VMware Tools, specifically targeting the macOS operating system
CVE-2023-5815 has been discovered in the plugin that could allow unauthenticated attackers to execute arbitrary code on vulnerable websites
Seiko, announced that a ransomware incident first reported this summer resulted in the exposure of approximately 60,000 personal data entries of its clients
CloudFlare had mitigated thousands of volumetric HTTP Distributed DDoS attacks that exploited the disclosed vulnerability known as HTTP/2 Rapid Reset
IMAPLoader is a .NET-based malware designed to identify victim systems using standard Windows utilities. It operates as a loader
StripedFly malware is capable of executing diverse attacks and boasts numerous modules, making it a versatile tool for malefactors
According to a recently published report by the NCC Group, this past September marked a historic peak in ransomware incidents
By tapping into PAM's APIs, malware can intercept the authentication flow, thereby jeopardizing system security
The vulnerability, CVE-2023-46747, has a CVSS score of 9.8, making it one of the most severe vulnerabilities ever discovered in F5 BIG-IP
Termed 'iLeakage', this side-channel attack is not only practical but requires minimal resources for execution.