More results...
In March 2023, the total number of breaches reported was higher than those reported in the previous three years combined, according to Ivanti. Ransomware groups are continuously weaponizing vulnerabilities and adding them to their arsenal to mount crip…
Android devices are vulnerable to security exploits. Over the years, cybersecurity researchers have detected multiple vulnerabilities in Android devices. While Google has been taking some steps to make its devices less vulnerable to security threats, A…
Researchers based at Tencent Labs and Zhejiang University have created a new attack known as “BrutePrint.” The brute force attack targets the fingerprints on modern smartphones with the aim of bypassing user authentication and having contro…
All Apple users have zero-days that need patching, though some have more zero-days than others.
Researchers have detected vulnerability in the popular KeePass password manager. The vulnerability is present in the master password existing on the application’s memory, and it allows attackers that have compromised a device to retrieve this password …
Mustang Panda, a Chinese threat actor group, has been associated with several sophisticated and targeted attacks targeting foreign affairs organizations located in Europe. The attacks appear to have started in January 2023. Mustang Panda exploits TP-Li…
Threat actors have been actively exploiting a vulnerability that was patched recently. The flaw existed within the WordPress Advanced Custom Fields plugin. The flaw was exploited around 24 hours after a proof-of-concept (PoC) exploit was released to th…
Malicious actors are increasingly exploiting legitimate tools to accomplish their goals, which include disabling security measures, lateral movement, and transferring files. Using commonly available tools allows attackers to evade detection. While cust…
Hackers have been using a new malware known as “AndoryuBot” to conduct hacking attacks. The malware targets a critical-severity vulnerability within the Ruckus Wireless Admin panel. After the hackers infiltrate the device, they later infect the unpatch…
Authorities in the United States have seized 13 internet domains that provided DDoS-for-hire services to threat actor groups. Distributed denial-of-service (DDoS) attacks have become rampant, and authorities globally have been cracking down on the spac…