Latest news
Spyware typically records user activity and transmits it to servers, consuming significant smartphone resources.
Contrasting with traditional bug bounty platforms, entities akin to Operation Zero abstain from alerting susceptible product suppliers
FTC that since 2021, Americans have suffered losses amounting to a staggering $2.7 billion due to social media scams
A critical vulnerability has been discovered in the Exim mailer software, which is widely used in Sophos Firewall and SG UTM products
The Artificial Intelligence Security Center is set to amalgamate various NSA endeavors pertinent to AI security, fostering collaborations
CISA unveiled a comprehensive report elucidating the most common cybersecurity misconfigurations within vast organizational frameworks
By adding an indirect layer to the attack, Meltdown shifts from being a transient execution attack to a stealthier side-channel attack
two critical vulnerabilities have been discovered in Microsoft PC Manager, which could allow a remote attacker to execute arbitrary code
A recently security flaw tracked as CVE-2023-32188, has sent ripples across the cybersecurity community due to its critical severity
This campaign displays significant overlaps with tactics, techniques, and procedures (TTPs) previously linked to cyber espionage initiatives
Sony confirmed this year that it suffered two significant data breaches, potentially leading to a vast expanse of personal data exposure.
CISA has added three new security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog due to active exploitation
CVE-2023-38545 is a severity-high vulnerability that affects both libcurl and the curl tool. This is a serious problem
A new and dangerous XSS vulnerability has been discovered in Microsoft Office, affecting hundreds of millions of users worldwide
Microsoft Defender showcased its susceptibility to false positives by recognizing the Tor browser as a virus and halting its operations
From March 1, 2024, an order will come into force to block VPN services providing access to sites banned in Russia
CVE-2023-39191 is a critical security vulnerability that could allow attackers to gain root access to affected systems.
CVE-2023-28229 is an elevation of privilege vulnerability that allows a local authenticated attacker to gain elevated privileges on the system
CVE-2023-20101, a critical security vulnerability could allow an unauthenticated, remote attacker to gain root access to an affected device
Besides the PoC exploit code for the CVE-2023-4911 bug, researchers have also unveiled a video demonstration.
The first zero-day (CVE-2023-42824) is a kernel vulnerability that allows local attackers to escalate privileges on unpatched devices.