Do Son
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a security advisory about a critical flaw in...
Latest news
The Axios project has released a security advisory for a newly discovered vulnerability affecting its popular promise-based...
The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw in Dassault Systèmes DELMIA Apriso...
Okta Threat Intelligence has published a detailed analysis of VoidProxy, a previously unreported Phishing-as-a-Service (PhaaS) platform that...
The PyInstaller project has released fixes for a local privilege escalation vulnerability that affected applications packaged with...
Bitdefender Threat researchers have detailed a new and highly sophisticated fileless malware framework named EggStreme, used by...
AhnLab researchers have published a technical analysis of BlackNevas, a ransomware group that has been steadily launching...
Intezer researchers have released a technical analysis of a new variant of ToneShell, a lightweight backdoor tied...
Zscaler ThreatLabz has identified a sophisticated malware campaign active since early May 2025, targeting Chinese-speaking users with...
The Angular team has issued a security advisory addressing a high-severity flaw in server-side rendering (SSR) that...
Attackers can leverage the CVE-2023-27350 vulnerability to bypass authentication, execute arbitrary code in the context of SYSTEM
How to fix Embedded and IoT development lifecycle issues Developing embedded systems and integrating them into the...
An unauthenticated hacker with network access to VMware Aria Operations for Logs may exploit CVE-2023-20864 to execute arbitrary code as root
Microsoft has announced that it will henceforth employ climate-related nomenclature to designate various types of hacking activities
Researchers from Symantec's Threat Hunter Team have discovered multiple unique plugins associated with the MgBot modular malware framework
CVE-2023-20873 affects multiple versions of Spring Boot, specifically 3.0.0 - 3.0.5, 2.7.0 - 2.7.10, and older unsupported versions
Parallax RAT operates by creating a file for automatic execution upon device startup and executing a legitimate Windows process.
Online capital convections from card to card are becoming a more and more common practice. Anyone can...
The Play ransomware group has developed two custom tools to infiltrate compromised networks, enumerate users and computers
2023Q1 saw these phishing campaigns primarily target Ukrainian users, accounting for over 60% of the observed Russian cyber activity
NVIDIA has released a security update for its DGX-1 firmware, addressing six vulnerabilities that may lead to issues such as arbitrary code execution
Attackers can exploit the CVE-2023-20046 vulnerability by sending a valid low-privileged SSH key to an affected device from a host configured
CVE-2023-20036 is present in the web UI of Cisco IND and allows an authenticated, remote attacker to execute arbitrary commands
two critical security vulnerabilities have been discovered in PaperCut MF and PaperCut NG, which are currently being exploited in the wild
It's important to note that Google has acknowledged the existence of an exploit for CVE-2023-2136 in the wild.
the Citizen Lab discovered a series of zero-click exploit chains developed by the NSO Group, targeting iOS 15 and iOS 16 devices worldwide
The exploitation of the CVE-2023-28787 vulnerability could allow a malicious actor to directly interact with a website's database
CVE-2023-30547 flaw could enable attackers to break out of security boundaries and execute arbitrary shellcodes.
CVE-2023-2002 has been identified within the Linux kernel, posing a significant risk to systems that utilize Bluetooth communication
The CVE-2023-20862 vulnerability arises when the logout support does not properly clean the security context if using serialized sessions.
CVE-2019-8526 allows a local attacker to obtain elevated privileges by exploiting a use-after-free issue in the Security component
A new security flaw (CVE-2023-1998) in the Linux kernel has come to light, which affects the way the kernel handles Spectre v2 mitigations