Do Son
The copyright lawsuit filed in 2023 by Sony Music, Universal Music Group (UMG), and several other record...
Latest news
The Wall Street Journal reports that the United States and China have entered the final stages of...
The U.S. Department of Justice (DOJ) announced the resentencing of Conor Brian Fitzpatrick, 22, of Peekskill, New...
A newly disclosed vulnerability in the Kubernetes C# client has been assigned CVE-2025-9708 with a CVSS score...
The long-running cybercrime group RevengeHotels—also tracked as TA558—has resurfaced with a new campaign targeting hotels and the...
The malicious supply chain campaign dubbed “Shai-Hulud” has struck again, this time compromising multiple npm packages published...
A newly disclosed vulnerability in the Linux kernel’s KSMBD subsystem has been assigned CVE-2025-38501, allowing remote attackers...
The Russian-linked threat actor APT28, also known as Sofacy, Fancy Bear, Forest Blizzard, and TAG-110, has unveiled...
First emerging in 2011, SmokeLoader (also known as Smoke or Dofoil) has remained one of the most...
A recent forensic investigation by Check Point Research (CPR) has shed light on the Pure malware family,...
The flaw, CVE-2023-27997, is a heap-based buffer overflow bug. This bug, when exploited, can enable unauthenticated users to execute code
CVE-2022-29842 is a code execution flaw that could allow network-adjacent attackers to execute arbitrary code on affected MyCloud PR4100 devices
CVE-2023-2530 with a substantial Common Vulnerability Scoring System (CVSS) score of 9.9, placing it in the realm of the utmost severity
Nacos versions 1.4.6 and 2.2.3 mainly fix an RCE vulnerability caused by unbounded use of hessian during some Jraft request processing.
The CVE-2023-20105 vulnerability resides within the change password functionality of the Cisco Expressway Series and Cisco TelePresence VCS
The Abandoned Cart Lite for WooCommerce - Authentication Bypass vulnerability, which is tracked as CVE-2023-2986, has a CVSS score of 9.8.
CVE-2023-20887, if exploited, could result in remote code execution—a scenario that spells serious trouble for network security
CVE-2023-33864 is an integer underflow that results in a heap-based buffer overflow within RenderDoc's server thread on TCP port 38920
The freshly unearthed security flaw, designated as CVE-2023-22647, has been graded with an alarming CVSS score of 9.9
Among the 10 issues confronted in the Android Framework, a noteworthy one is the critical RCE bug identified as CVE-2023-21127
The identified vulnerability, officially cataloged as CVE-2023-3079, raises alarm due to its potential misuse by threat actors
Zyxel has identified the issues and provided patches addressing these vulnerabilities, labeled CVE-2023-33009 and CVE-2023-33010
Security is a major concern for any facility, whether it’s a bank, hotel, or office building. To...
one such newly identified vulnerability - CVE-2023-34362 - a SQL injection vulnerability lurking in the MOVEit Transfer web application.
Bearing the name CVE-2023-33975 and a high CVSS score of 9.8, a critical code execution vulnerability lies at the heart of RIOT.
Firmware security firm Eclypsium has unearthed a backdoor in Gigabyte motherboards. This security issue involves 271 models of Gigabyte motherboards
an administrator of Exposed has disclosed a substantial portion of member information from RaidForums, totaling 478,870 members
CVE-2023-33733 has wide-reaching implications, as numerous applications and libraries utilize ReportLab, such as the 'xhtml2pdf' utility function
CVE-2023-34152 is an ominous manifestation of remote code execution (RCE) vulnerability in OpenBlob when configured with --enable-pipes
Microsoft's security division today unveiled the intricate details of the CVE-2023-32369 vulnerability, dubbed Migraine
the discovery of an Unauthenticated PHP Object Injection vulnerability, with a CVE score of 8.3 and marked as CVE-2023-28782
The implications of CVE-2023-2650 are more pronounced in specific OpenSSL subsystems such as OCSP, PKCS7/SMIME, CMS, CMP/CRMF, and TS