Hidden Command Discovered in Bluetooth Chips Used Across a Billion Devices
Security researchers from Tarlogic Security have unveiled new techniques that significantly simplify Bluetooth attacks using widely available hardwar…
Security
Microsoft Uncovers Massive Malvertising Campaign Affecting One Million Devices via GitHub
Microsoft Threat Intelligence has detected a large-scale malvertising campaign that impacted approximately one million devices globally in December 2…
Critical Vulnerability in Sitecore Experience Platform Discovered
Security researchers at Assetnote, recently acquired by Searchlight Cyber, have uncovered a pre-authentication remote code execution vulnerability in…
Three VMware Vulnerabilities Actively Exploited in the Wild
Broadcom has released urgent security patches to address three actively exploited vulnerabilities in VMware ESXi, Workstation, and Fusion products. T…
Latest Ransomware Attack Methods Explained for Small Businesses
In today’s interconnected world, small businesses face an escalating threat from cybercriminals, with ransomware emerging as one of the most insidiou…
New Linux Backdoor "Auto-Color" Targets Universities and Government Offices
Palo Alto Networks' Unit 42 researchers have discovered a sophisticated new Linux malware called " Auto-Color ," which primarily target…
Critical RCE Vulnerability Discovered in MITRE Caldera Framework
Security researchers have identified a critical remote code execution vulnerability in MITRE Caldera, a widely used adversary emulation platform. The…
Bybit Hack Linked to Lazarus Group, Exchange Offers Bounty
The cryptocurrency industry's largest hack has taken a new turn as security researchers identify North Korea's Lazarus Group as the perpetra…
Bybit Suffers Largest Crypto Hack in History, Losing $1.4 Billion
Bybit, a prominent cryptocurrency exchange, fell victim to the largest hack in crypto history, losing roughly $1.4 billion in digital assets. The bre…
Zero-Day Flaw in Parallels Desktop Allows Root Privilege Escalation
Security researchers have dropped a significant zero-day vulnerability in Parallels Desktop that could allow attackers to gain root privileges on mac…
Vulnerabilities in Ivanti Endpoint Manager Allow Credential Relay Attacks
Security researchers have discovered four critical vulnerabilities in Ivanti Endpoint Manager (EPM) that could allow unauthenticated attackers to pot…
Burp AI — An AI Powered Extensions for Burp Suite Professional
PortSwigger, the company behind the popular web security testing tool Burp Suite, has announced a significant advancement in application security tes…
PostgreSQL Patched Critical SQL Injection Vulnerability
Security researchers at Rapid7 have uncovered a significant SQL injection vulnerability (CVE-2025-1094) affecting PostgreSQL's interactive termin…
Chinese Espionage Tools Used in Ransomware Attacks
Security researchers at Symantec have uncovered an unusual cybersecurity incident where tools typically associated with Chinese espionage operations …
Researchers Uncover Authentication Bypass Vulnerability in Palo Alto Networks' PAN-OS
Security researchers at Assetnote have discovered a critical authentication bypass vulnerability in Palo Alto Networks' PAN-OS management interfa…
Microsoft Exposes Russian Hacking Group "BadPilot" Targeting Global Infrastructure
Microsoft Threat Intelligence has revealed details about an extensive cyber operation conducted by a subgroup within the Russian state actor Seashell…
Ad Tech Firm Tracked 1.3 Billion People including US Military Personnel
A recent investigation has uncovered how a Lithuanian ad-tech company, Eskimi, collected and provided sensitive location data of US military personne…
Researcher Discovers Critical NVIDIA Container Vulnerability
Security researchers at Wiz have uncovered a critical vulnerability (CVE-2024-0132) in NVIDIA's Container Toolkit that could allow attackers to e…
Microsoft Warns of Advanced PowerShell Exploitation by North Korean Actors
Microsoft Threat Intelligence has uncovered a sophisticated new tactic being employed by the North Korean state-sponsored threat group Emerald Sleet,…
Takedown of 8Base Ransomware Crew in Thailand
A coordinated international law enforcement operation has led to the arrest of two Russian nationals who allegedly operated the notorious 8Base ranso…