Latest news
McAfee Labs has discovered a new series of phishing attacks that leverage server-parsed HTML files to redirect users to malicious websites
On April 3rd, Western Digital announced the cyberattack; My Cloud for Western Digital NAS devices resumed operation on April 13th
In November 2017 Uber issued a data breach notification concerning the incident. Uber had reached a $148 million settlement agreement
since October alone, Facebook's security analysts have identified approximately ten malware families impersonating ChatGPT and similar tools
Malwareman007 released a PoC exploit for the CVE-2023-27326 vulnerability. The exploit was tested on Parallels Desktop version 18.0.0.
With a high CVSS score of 9.6, the CVE-2023-2478 vulnerability poses a serious risk to the integrity and security of GitLab projects.
Researcher Xkaneiki developed a PoC exploit for this vulnerability, demonstrating the potential risks posed by CVE-2023-0386
Malicious actors could exploit the CVE-2023-30777 vulnerability by manipulating the $this->view variable from the current_screen function
Trojan called Fleckpe hides within seemingly innocent apps such as photo editing software and wallpaper packs
A recent scholarly article elucidates vulnerabilities called 'faulTPM' within AMD SoCs that could enable attackers to neutralize any security
CVE-2023-20126 affects Cisco SPA112 2-Port Phone Adapters and allows an attacker to execute arbitrary code on affected devices.
MuddyWater APT group has shifted its focus to MSPs, exploiting legitimate remote access tools and employing various tactics
Researchers from Trend Micro have uncovered a new campaign by Earth Longzhi, a subgroup of APT41, which targets organizations
CVE-2022-46718, a logic issue affecting Apple's iOS, enables unauthorized applications to access users' sensitive location information
Researcheruncovered a privilege escalation vulnerability (CVE-2023-30869) in the Easy Digital Downloads plugin versions 3.1.1.4.1 and below
The CVE-2023-21839 vulnerability affects the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Rapture shares similarities with the Paradise ransomware, such as the RSA key configuration file and the requirement of a .NET 4.0 framework
CVE-2023-2356 (CVSS score of 10) allows attackers to access local server files on tracking server through a relative path traversal exploit
CVE-2023-30847 leads to invalid memory reads in proxy handler, which causes crashes, leaks of sensitive information to backend HTTP servers
One of APT41's tools is a stealthy and persistent PowerShell backdoor that bypasses traditional security measures
The impact of the CVE-2023-29007 vulnerability is substantial, as it can lead to arbitrary code execution by injecting values for executables