CVE-2024-12856 flaw in Four-Faith routers enables OS command injection via default credentials, exposing over 15,000 devices ...

OtterCookie, a new JavaScript malware by North Korean hackers, steals data via Socket.IO and funds nuclear programs.

Junior Barros De Oliveira, 29, of Curitiba, Brazil has been charged with four counts of extortionate threats involving ...

CVE-2024-3393, a critical PAN-OS flaw (CVSS 8.7), allows unauthenticated DoS attacks; update to the latest patches to secure ...

Cloud Atlas exploits CVE-2018-0802 to deploy VBCloud malware, targeting 80% of victims in Russia for data theft, system ...

D-Link vulnerabilities power Mirai and Kaiten botnets, spreading globally. CAPSAICIN botnet targets East Asia with intense ...

The Apache Software Foundation (ASF) has released patches to address a maximum severity vulnerability in the MINA Java ...

The Iranian nation-state hacking group known as Charming Kitten has been observed deploying a C++ variant of a known malware ...

Apache Traffic Control 8.0.2 fixes CVE-2024-45387, a critical 9.9 CVSS SQL injection flaw targeting privileged users.

Apache releases a security update for CVE-2024-56337, addressing RCE risks in Tomcat servers with critical configuration ...

The trends shaping 2025 show the importance of adopting forward-thinking strategies to address evolving threats. From ...

PyPI packages "Zebo" and "Cometlogger" downloaded 280+ times, exfiltrate data with obfuscation and anti-detection.