Bitdefender Warns of Multiple Vulnerabilities that Let Attackers Execute MITM Attack
14
Mar
2025

Bitdefender Warns of Multiple Vulnerabilities that Let Attackers Execute MITM Attack

Bitdefender has disclosed two critical vulnerabilities affecting its BOX v1 device that could allow network-adjacent attackers to execute Man-in-the-Middle (MITM)…

Mozilla Urging Users to Update Firefox, Else Add-ons Will Stop Working
14
Mar
2025

Mozilla Urging Users to Update Firefox, Else Add-ons Will Stop Working

Mozilla has issued an urgent warning to Firefox users worldwide, emphasizing the critical need to update their browsers before March…

GitLab addressed critical auth bypass flaws in CE and EE)
14
Mar
2025

GitLab addressed critical auth bypass flaws in CE and EE)

GitLab addressed critical auth bypass flaws in CE and EE Pierluigi Paganini March 13, 2025 GitLab addressed two critical authentication…

Picus Red Report 2025 header
14
Mar
2025

Unmasking a 3X Spike in Credential Theft and Debunking the AI Hype

Cybercriminals have turned password theft into a booming enterprise, malware targeting credential stores jumped from 8% of samples in 2023…

2-year-old Windows Kernel 0-day Vulnerability Exploited in the Wild
14
Mar
2025

2-year-old Windows Kernel 0-day Vulnerability Exploited in the Wild

Microsoft has patched a critical Windows Kernel vulnerability that has been actively exploited for nearly two years.  The vulnerability, tracked…

Booking
14
Mar
2025

ClickFix attack delivers infostealers, RATs in fake Booking.com emails

Microsoft is warning that an ongoing phishing campaign impersonating Booking.com is using ClickFix social engineering attacks to infect hospitality workers…

Apache NiFi Vulnerability Let Attackers Access MongoDB Username & Passwords
14
Mar
2025

Apache NiFi Vulnerability Let Attackers Access MongoDB Username & Passwords

A significant security vulnerability has been identified in Apache NiFi, allowing potential attackers with specific access privileges to expose MongoDB…

New DCRat Campaign Uses YouTube Videos to Target Users
14
Mar
2025

New DCRat Campaign Uses YouTube Videos to Target Users

A new campaign involving the DCRat backdoor has recently been uncovered, leveraging YouTube as a primary distribution channel. Since the…

FBI and CISA Urge Enabling 2FA to Counter Medusa Ransomware
14
Mar
2025

FBI and CISA Urge Enabling 2FA to Counter Medusa Ransomware

FBI and CISA warn of Medusa ransomware attacks impacting critical infrastructure. Learn about Medusa’s tactics, prevention tips, and why paying…

Over 200,000 myGov users disable passwords in passkey shift
14
Mar
2025

Over 200,000 myGov users disable passwords in passkey shift – Security

New figures reveal that over 200,000 users of myGov password stopped using passwords in favour of exclusively using passkeys as…

VScode
14
Mar
2025

Microsoft apologizes for removing VSCode extensions used by millions

Microsoft has reinstated the ‘Material Theme – Free’ and ‘Material Theme Icons – Free’ extensions on the Visual Studio Marketplace…

DeepSeek Generating Fully Working Keyloggers & Data Exfiltration Tools
14
Mar
2025

DeepSeek Generating Fully Working Keyloggers & Data Exfiltration Tools

Security researchers at Unit 42 have successfully prompted DeepSeek, a relatively new large language model (LLM), to generate detailed instructions…