News

In a shocking revelation, cybersecurity researchers have uncovered a significant vulnerability affecting certain Kia vehicles that allows hackers to remotely control a car using nothing

A newly discovered Bluetooth vulnerability, CVE-2020-26558, presents a major security threat to devices using various Bluetooth Core Specifications. The issue, termed “Impersonation in the Passkey

Recent investigations by cybersecurity experts have yielded valuable insights into the detection of human-operated ransomware attacks using Windows Event Logs. This advancement has the potential

Hex-Rays has officially released IDA 9.0, introducing notable licensing changes and enhanced features aimed at improving user experience and functionality across various platforms. The latest

Hackers gained access to OpenAI’s official press account on X, a platform utilized for product and policy updates. They issued a fraudulent announcement regarding a

Cisco Talos’ Vulnerability Research team has identified two critical vulnerabilities in Microsoft products, which the company has addressed during the recent Patch Tuesdays. These vulnerabilities

Meta has been hit with a €91 million ($101 million) fine by the Irish Data Protection Commission (DPC) for storing millions of user passwords in

HPE Aruba Networking has released a critical security advisory highlighting several vulnerabilities in their Access Points using Instant AOS-8 and AOS-10 software. These flaws, tracked

HTML smuggling is an advanced method employed by cybercriminals to distribute malware by incorporating harmful JavaScript into seemingly innocuous HTML files. This technique leverages HTML5

Ransomware groups are structured cybercriminal organizations that use malicious software to encrypt victims’ data and demand ransom payments in exchange for decryption keys. The proliferation

LummaC2 Stealer is an advanced malware designed to steal sensitive information, primarily targeting cryptocurrency wallets and two-factor authentication (2FA) extensions in multiple web browsers. Initially

WhatsUp Gold, a popular network monitoring tool, has uncovered six critical vulnerabilities that could enable attackers to gain unauthorized access to networks. Users running versions

A serious vulnerability in VLC media player has been discovered, enabling attackers to execute harmful code on users’ devices. Highlighted in the Security Bulletin for

A serious security vulnerability has been identified in the NVIDIA Container Toolkit that could enable attackers to escape from a container and gain full access

A critical remote code execution (RCE) vulnerability has been discovered in the Common Unix Printing System (CUPS), impacting all GNU/Linux systems. Uncovered by Simone Margaritelli,

A sophisticated threat actor linked to India has been observed leveraging multiple cloud services to carry out credential theft, malware distribution, and command-and-control (C2) operations.

Citrix has released a security advisory detailing vulnerabilities in XenServer and Citrix Hypervisor that could allow a malicious guest VM administrator to crash or disable

State-sponsored hackers backed by Beijing have breached multiple U.S. internet service providers (ISPs) in a cyber espionage campaign aimed at extracting sensitive information, according to

MoneyGram, a prominent international money transfer service, has disclosed it was targeted by a cyberattack, causing an extended network outage that affected several of its

A critical vulnerability in the Microchip Advanced Software Framework (ASF) has been uncovered, potentially allowing remote code execution (RCE) via a stack-based overflow in the

Discord has announced the launch of a new end-to-end encryption (E2EE) protocol called DAVE (Discord’s Audio and Video End-to-End Encryption), aimed at securing audio and

North Korean-linked hackers have been using tainted Python packages to deploy a new malware named PondRAT, according to Palo Alto Networks’ Unit 42. PondRAT is

A Chinese-linked advanced persistent threat (APT), identified as Earth Baxia, has been targeting government organizations in Taiwan and other Asia-Pacific (APAC) nations by exploiting a

A critical vulnerability has been uncovered in the FreeBSD hypervisor, bhyve, that allows malicious software within a guest virtual machine (VM) to execute arbitrary code

The hacking group TeamTNT, notorious for its cryptojacking campaigns, has re-emerged with a new attack targeting Virtual Private Servers (VPS) running on the CentOS operating

Ivanti has disclosed a critical vulnerability affecting its Cloud Service Appliance (CSA), which is currently being actively exploited. The flaw, identified as CVE-2024-8963, holds a

A significant security incident occurred within Hezbollah in Lebanon when malware infiltrated the group’s communication systems, leading to explosions in pager batteries. The explosions, which

Google has announced its plan to transition from KYBER to ML-KEM in its Chrome browser as part of ongoing efforts to protect against threats posed

The U.S. Department of Treasury has introduced new sanctions against five executives and one entity linked to the Intellexa Consortium for their involvement in the

A malicious operation has been uncovered, targeting Mac users searching for AppleCare+ support or extended warranty services. Scammers are purchasing Google ads to direct victims

Cybersecurity researchers have flagged an ongoing phishing campaign that exploits refresh entries in HTTP headers to deliver fake email login pages aimed at stealing user

The Medusa ransomware group has been exploiting a critical SQL injection vulnerability in Fortinet’s FortiClient EMS software, identified as CVE-2023-48788. This flaw allows attackers to

A critical vulnerability was identified in Azure API Management (APIM), allowing users with Reader-level access to escalate their privileges to Contributor-level access. This flaw enabled

Kawasaki Motors Europe (KME) confirmed a cyberattack in early September that briefly disrupted its operations, though the company stated the attack was ultimately unsuccessful. As

The Port of Seattle has confirmed that the Rhysida ransomware group was behind the cyberattack that disrupted its operations on August 24, 2024. The attack

Ivanti recently disclosed that a newly patched security flaw in its Cloud Service Appliance (CSA) is being actively exploited. The vulnerability, tracked as CVE-2024-8190 with

Cybersecurity researchers have identified a new variant of the Android banking trojan TrickMo, equipped with enhanced features for evading detection and capturing victims’ banking credentials

Cybersecurity researchers have identified a new malware campaign targeting Linux systems to perform unauthorized cryptocurrency mining, specifically exploiting Oracle WebLogic servers. According to cloud security

Nearly 1.3 million Android-based TV boxes, running outdated versions of the operating system and used in 197 countries, have been compromised by a new malware

There has been a new Ajina strain of Android malware since at least November 2024.In an attempt to obtain financial data and intercept two-factor authentication