Critical Vulnerability on Samsung Devices Could Enable Remote Exploitation
A significant vulnerability has been uncovered in Samsung smartphones, linked to the Monkey's Audio (APE) decoder. The flaw, now resolved, was identified as
Vulnerabilities
80 articles
CISA Warns on Known Exploited Vulnerability ‘Roundcube’
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) included a well-known vulnerability in its Known Exploited Vulnerabilities (KEV) catalog,
FBI and CISA Issue Warning on AndroxGh0st Malware
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have issued warnings about the proliferation of
Over 178,000 SonicWall Firewalls Vulnerable to Exploits
A recent investigation by cybersecurity experts at Bishop Fox has uncovered a significant vulnerability in SonicWall's next-generation firewalls (NGFW). This
Hacker Group Actively Exploiting a Critical Exchange Server Vulnerability
A significant threat has emerged from an activity group known as Forest Blizzard (STRONTIUM), originating from Russia. This group has been actively exploiting
Exposed Kubernetes Secrets Can Lead to Supply Chain Attacks
In the ever-evolving landscape of cybersecurity, a new concern has emerged that could jeopardize the safety of numerous organizations. This issue revolves
Urgent Alert: LockBit Ransomware Targets Citrix Users – Protect Your Network Now!
The recent discovery and exploitation of CVE-2023-4966, a significant vulnerability in Citrix NetScaler Gateway and ADC devices, underscores the critical
New PoC for Apache ActiveMQ’s Critical Flaw Unleashes a Wave of Cyber Mayhem
The exploitation of a critical security flaw in Apache ActiveMQ, identified as CVE-2023-46604 with a CVSS score of 10.0, has raised significant concerns in
Class Action Lawsuit Targets Intel Over Handling of Downfall Vulnerability
Intel is facing a class-action lawsuit over its management of speculative execution vulnerabilities, specifically the recently disclosed Downfall attack
Experts released PoC exploit code for VMware Aria Operations for Logs flaw
VMware has become aware of a potentially critical security concern surrounding VMware Aria Operations for Logs, formerly known as vRealize Log Insight. A
Norway on High Alert as Cisco Zero-Days Compromise ‘Important Businesses’
In a recent security development, Norway's National Security Authority (NSM) issued a stark warning regarding the exploitation of two Cisco vulnerabilities,
Vulnerability in TinyMCE Text Editor Can Allow Attacker Execute XSS Payloads
In the realm of text editors, TinyMCE has long been a popular choice, and on October 19, 2023, Tiny Technologies unveiled a significant update, version
Zero-Day Vulnerability in Cisco IOS XE Exploited in the Wild
On October 16, Cisco's Talos issued a stern warning about a zero-day vulnerability lurking in the Web User Interface (Web UI) feature of Cisco IOS XE. This
Unmasking the Vulnerability Exploits Fueling Ransomware Attacks
In the ever-evolving landscape of cyber threats, threat actors have an arsenal of methods to infiltrate an organization's infrastructure. While the tactics
Android Updates Patching Over 40 Vulnerabilities
Android has released its August Security patches, addressing over 40 vulnerabilities.
Microsoft Addresses 74 Software Vulnerabilities in August 2023 Update Cycle
In its recent effort to enhance digital security, Microsoft has taken action to rectify a total of 74 vulnerabilities present in its software through the
Chrome Security Update: 17 New Security Fixes
Google has published a security update for Chrome, updating the Stable channel for Mac and Linux to 115.0.5790.170 and 115.0.5790.170/.171 for Windows.
Splunk Vulnerability May Allow Attackers To Execute Malicious Code
Splunk, a leading security solution, has recently uncovered a critical vulnerability within its powerful Security Orchestration, Automation, and Response