Latest news
Lancefly has been deploying a powerful custom-written backdoor named Merdoor to launch targeted cyber-attacks on organizations across South
Dubbed CVE-2023-32784, this security bug exposes a loophole that allows for the master password to be dumped from memory
CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, indicating evidence of active exploitation.
In a recent development, researcher j00sean has released a proof-of-concept (PoC) for the CVE-2023-27363 vulnerability.
A marked increase in malicious advertisement campaigns circulating within Google's search engine, all bearing themes related to AI tools
Aruba issued patches for multi security vulnerabilities found in its ArubaOS 10 and Aruba InstantOS, which were affecting its access points
CVE-2023-28936 stems from an insufficient check of the invitation hash, allowing an attacker to access any arbitrary recording or room
A new, sophisticated phishing-as-a-service (PaaS) offering has been discovered by researchers from Cisco Talos, dubbed โGreatness.โ
The grave security flaw, tracked as CVE-2023-32243, with a CVSS score of 9.8, is an unauthenticated privilege escalation vulnerability.
Among the addressed vulnerabilities, one has been detected under active exploitation in the wild: CVE-2023-29336
AndoryuBot botnet targets the Ruckus vulnerability to access devices, subsequently downloading a script for further propagation
CVE-2023-32233 has been discovered in the Linux kernel, which allows local authenticated users to escalate their privileges on the system.
The CVE-2023-30237 vulnerability was addressed in the 8.3.10.10015 version of CyberGhost, released on February 24, 2023
The flaw in question, CVE-2023-31039, has been classified as "important" in terms of severity and affects Apache bRPC versions 0.9.0 through 1.4.9
McAfee Labs has discovered a new series of phishing attacks that leverage server-parsed HTML files to redirect users to malicious websites