Introduction Open Web Application Security Project (OWASP), a non-profit foundation dedicated to web application...
Impact Denial of Service Remote Code Execution Information Disclosure Elevation of Privilege System / Technologies...
A vulnerability has been identified in QNAP NAS, a remote user can exploit this vulnerability...
Multiple vulnerabilities were identified in Android, a remote attacker could exploit some of these vulnerabilities...
The Hong Kong Monetary Authority (HKMA) today (4 October) released a technical whitepaper on retail...
Multiple vulnerabilities were identified in Microsoft Edge, a remote attacker could exploit some of these...
Multiple vulnerabilities were identified in Google Chrome, a remote attacker could exploit some of these...
The Hong Kong Monetary Authority (“HKMA”) announced the results of the residential mortgage survey for...
The Hong Kong Monetary Authority (HKMA) announced today (30 September) that the total assets of...
Cyber Alerts
- ASUS Urges Users to Patch AiCloud Router Vuln Immediately April 21, 2025The vulnerability is only found in the vendor's router series and can be triggered by an attacker using
- Widespread Microsoft Entra lockouts tied to new security feature rollout April 19, 2025Windows administrators from numerous organizations report widespread account lockouts triggered by false positives in the rollout of a new Microsoft
- State-sponsored hackers embrace ClickFix social engineering tactic April 19, 2025ClickFix attacks are being increasingly adopted by threat actors of all levels, with researchers now seeing multiple advanced persistent
- New Android malware steals your credit cards for NFC relay attacks April 18, 2025A new malware-as-a-service (MaaS) platform named 'SuperCard X' has emerged
- FBI: Scammers pose as FBI IC3 employees to 'help' recover lost funds April 18, 2025The FBI warns that scammers posing as FBI IC3 employees are offering to "help" fraud victims recover
- Critical Erlang/OTP SSH RCE bug now has public exploits, patch now April 18, 2025Public exploits are now available for a critical Erlang/OTP SSH vulnerability tracked as CVE-2025-32433
- SonicWall SMA VPN devices targeted in attacks since January April 17, 2025A remote code execution vulnerability affecting SonicWall Secure Mobile Access (SMA) appliances has been under active exploitation since
- Over 16,000 Fortinet devices compromised with symlink backdoor April 16, 2025Over 16,000 internet-exposed Fortinet devices have been detected as compromised with a new symlink backdoor that
- Infamous message board 4chan taken down following major hack April 15, 20254chan, a notorious online forum, was taken offline earlier today after what appears to be a significant hack
- AI-Powered Presentation Tool Leveraged in Phishing Attacks April 15, 2025Researchers at Abnormal Security said threat actors are using a legitimate presentation and graphic design tool named "Gamma"
- Midnight Blizzard deploys new GrapeLoader malware in embassy phishing April 15, 2025Russian state-sponsored espionage group Midnight Blizzard is behind a new spear-phishing campaign targeting diplomatic entities in
- New SSL/TLS certs to each live no longer than 47 days by 2029 April 14, 2025IT admins, get ready to grumble CA/Browser Forum – a central body of web browser makers
- Google adds Android auto-reboot to block forensic data extractions April 14, 2025Google is rolling out a new security mechanism on Android devices that will automatically reboot locked, unused devices after
- Chinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell Tool April 14, 2025The China-linked threat actor known as UNC5174 has been attributed to a new campaign that leverages a variant
- Why is someone mass-scanning Juniper and Palo Alto Networks products? April 10, 2025Espionage? Botnets? Trying to exploit a zero-day? Updated Someone or something is probing devices
- Oracle says "obsolete servers" hacked, denies cloud breach April 9, 2025Oracle finally confirmed in email notifications sent to customers that a hacker stole and leaked credentials that were stolen from
- PoisonSeed Exploits CRM Accounts to Launch Cryptocurrency Seed Phrase Poisoning Attacks April 7, 2025A malicious campaign dubbed PoisonSeed is leveraging compromised credentials associated with customer relationship management (CRM) tools and bulk
- Malicious VSCode extensions infect Windows with cryptominers April 7, 2025Nine VSCode extensions on Microsoft's Visual Studio Code Marketplace pose as legitimate development tools while infecting users with
- Carding tool abusing WooCommerce API downloaded 34K times on PyPI April 5, 2025A newly discovered malicious PyPi package named 'disgrasya' that abuses legitimate WooCommerce stores for validating stolen credit
- WinRAR flaw bypasses Windows Mark of the Web security alerts April 4, 2025A vulnerability in the WinRAR file archiver solution could be exploited to bypass the Mark of the Web (MotW