Latest news
CVE-2023-20078 in the web-based management interface of Cisco IP Phone allow attackers to execute arbitrary commands with root privileges
The U.S. Marshals Service (USMS) announced that it is investigating a major security breach that resulted in the leak of sensitive information
An attacker could exploit CVE-2023-1017 to execute arbitrary code in the TPM context or crash the TPM chip/process or rendering it unusable.
Tracked as CVE-2023-27320, the flaw exists in sudo's per-command chroot feature, which allows users to specify an alternate root directory
According to theregister, Telus is currently investigating a data breach incident involving employee information and source code.
Hackers released pirated Final Cut Pro software that carries the XMRig mining program, which specifically uses Mac users to mine Monero coins
hackers used a phishing attack to obtain a verification code from an Activision employee, gaining access to their Slack account
Most critical flaw affecting ZoneMinder tracked as CVE-2023-26035 (CVSS score: 10), stems from an insufficient validation of permissions check
various Android malware families are mimicking icon & name of ChatGPT to mislead unsuspecting users, making them believe it is a genuine app
The Amsterdam cyber crime police in the Netherlands recently announced the arrest of three criminals involved in ransomware activities
Apache Airflow has published a security advisory to warn users about multiple vulnerabilities affecting many of its packages.
CVE-2023-22920 could allow a remote attacker to gain unauthorized access to the system, caused by a factory-default misconfiguration
Bugs tracked as CVE-2023-25157 affecting GeoServer and CVE-2023-25158 affecting GeoTools carry a critical severity rating of 9.8 on the CVSS
Security researchers discovered CVE-2023-22578 & CVE-2023-25813, two critical-severity defects in Sequelize assessed with a CVSS score of 10
CVE-2022-41223 and CVE-2022-40765 can be exploited by a remote authenticated attacker to execute arbitrary code on the system.
The serious flaw, CVE-2023-20858, carries a CVSS severity score of 9.1, adding to the urgency for organizations to apply available patches.
Horizon3.ai has made public a PoC exploit for CVE-2022-39952 that allows an attacker to create a reverse shell.
Apache Tomcat was vulnerable to Apache Commons FileUpload flaw CVE-2023-24998 as there was no limit to the number of request parts processed
An attacker could exploit the CVE-2022-27677 vulnerability to execute arbitrary code with higher privileges on the system.