OtterCookie, a new JavaScript malware by North Korean hackers, steals data via Socket.IO and funds nuclear programs.

Cloud Atlas exploits CVE-2018-0802 to deploy VBCloud malware, targeting 80% of victims in Russia for data theft, system ...

CVE-2024-3393, a critical PAN-OS flaw (CVSS 8.7), allows unauthenticated DoS attacks; update to the latest patches to secure ...

Cybersecurity researchers have found that it's possible to use large language models (LLMs) to generate new variants of malicious JavaScript code at scale in a manner that can better evade detection. ...

D-Link vulnerabilities power Mirai and Kaiten botnets, spreading globally. CAPSAICIN botnet targets East Asia with intense ...

The Apache Software Foundation (ASF) has released patches to address a maximum severity vulnerability in the MINA Java ...

Japanese and U.S. authorities have formerly attributed the theft of cryptocurrency worth $308 million from cryptocurrency ...

Junior Barros De Oliveira, 29, of Curitiba, Brazil has been charged with four counts of extortionate threats involving ...

Claroty's research also found that it's easy to break MQTT authentication by simply knowing the device's serial number (CVE-2024-45722, CVSS score: 7.5), subsequently exploiting the access to Ruijie's ...

Apache Traffic Control 8.0.2 fixes CVE-2024-45387, a critical 9.9 CVSS SQL injection flaw targeting privileged users.

The Iranian nation-state hacking group known as Charming Kitten has been observed deploying a C++ variant of a known malware ...

PyPI packages "Zebo" and "Cometlogger" downloaded 280+ times, exfiltrate data with obfuscation and anti-detection.