Do Son
Western Digital (WD) has patched a critical vulnerability in its My Cloud NAS platforms that could allow...
Latest news
Broadcom has released patches for three vulnerabilities affecting VMware vCenter Server and VMware NSX, with severities rated...
The Apache Fory project, a high-performance multi-language serialization framework, has disclosed a critical vulnerability (CVE-2025-61622) that could...
Doxense has issued an urgent security advisory addressing a critical remote code execution (RCE) vulnerability in its...
Broadcom has released patches addressing three vulnerabilities in VMware Aria Operations and VMware Tools, with severities ranging...
Independent researcher Strey Paws has published an in-depth analysis of CVE-2024-38399, a race condition in Qualcomm’s KGSL...
The Stormshield Cyber Threat Intelligence (CTI) team has uncovered new phishing infrastructure tied to APT35, also known...
The UK’s National Cyber Security Centre (NCSC) has released a detailed malware analysis report exposing RayInitiator and...
A new analysis from Silent Push Threat Analysts highlights the growing misuse of publicly rentable subdomain providers,...
The cybercriminal underground is witnessing a dramatic shift with the emergence of Acreed, a new infostealer that...
CVE-2023-5043 and CVE-2023-5044, stem from insufficient input validation and could lead to arbitrary code execution
Cl0p gained access to the email addresses of approximately 632,000 employees from the U.S. Department of Defense and Justice
Canadian government announced a prohibition on the installation of the Chinese messaging app WeChat and Kaspersky
Cybersecurity experts have uncovered an attack technique targeting corporate Slack users, aptly termed 'Wiki-Slack.'
Unit 42 division has identified and are closely monitoring the progression of a malevolent campaign dubbed EleKtra-Leak
CVE-2023-3959 allows attackers to execute arbitrary code on the devices, which could allow them to take complete control of the devices
An attacker could exploit CVE-2023-20886 to redirect a victim to a malicious website that is designed to steal their SAML response
CVE-2023-47174 is a critical bug in Thorn SFTP Gateway that could allow an attacker to execute arbitrary code on SFTP Gateway server
Atlassian has rated the CVE-2023-22518 vulnerability as 9.1/10 severity on the Common Vulnerability Scoring System (CVSS)
Knight is believed to have evolved from its predecessor, "Cyclops," which had the capability to infect Windows, Linux, and Mac OS
Malwarebytes Labs has unveiled a case where malvertising was entirely unintentional, the result of a confluence of compromised website content
The adoption of the Forked IcedID variant in these campaigns stands out due to its rare use in cyberattacks.
warnings about a fresh wave of attacks targeting Chinese internet users, orchestrated by the hacker collective known as Higaisa
The Protective Domain Name Service obstructs access to domains recognized as malicious by actively blocking them
In summation, the HackerOne report underscores the profound influence of ethical hackers on the cybersecurity domain
Utilizing its distinctive ransomware, the Ragnar Locker group had been linked to assaults on significant infrastructural entities
CVE-2023-47090 could allow an attacker to gain access to a NATS.io server and send or receive messages without authorization
In the esteemed Clark County School District (CCSD) of Nevada, a cyberattack transpired, granting hackers unauthorized access to student data
Not only does it address CVE-2023-36563, but it also patches up two more zero-day vulnerabilities that hackers have been exploiting
The eminent aerospace conglomerate, Boeing, has found itself ensnared by the cyber malefactors of Lockbit
In the past, Pegasus spyware has been leveraged to compromise the mobile devices of journalists, human rights defenders, and diplomats
As technology gets bigger and more woven into our daily lives, the topic of ethical design is...