Jan 27, 2025Ravie LakshmananCyber Espionage / Threat Intelligence A previously unknown threat actor has been observed copying the tradecraft associated with the Kremlin-aligned Gamaredon hacking…
A breakthrough framework named SCAVY has been introduced to proactively detect memory corruption targets that could potentially lead to privilege escalation in the Linux kernel. Presented at…
Learn more about bug bounty programs and how they work > The Growing Trend At HackerOne, we’ve observed a notable increase in companies mentioning their…
Jan 27, 2025Ravie LakshmananMalware / SEO Poisoning Threat hunters have detailed an ongoing campaign that leverages a malware loader called MintsLoader to distribute secondary payloads…
Efficiency and accuracy are crucial in vulnerability remediation. Yet, repetitive and manual handling of tasks throughout the vulnerability lifecycle remains time-consuming and prone to human…
Researchers have exposed a systemic vulnerability within the Windows operating system, leveraging its “Best-Fit” charset conversion feature to bypass security checks and execute remote code.…
Artificial Intelligence (AI) has the potential to revolutionize various sectors, but when leveraged by malicious actors, it can lead to catastrophic outcomes. A striking example…
PowerSchool has shared new updates to last week’s cyberattack that targeted the personal information of over 300,000 teachers. The PowerSchool data breach, which has been…
Free Webinar – DevSecOps Hacks By embedding security into your CI/CD workflows, you can shift left, streamline your DevSecOps processes, and release secure applications faster—all…
The rise of deepfakes, artificial media that use AI to create hyper-realistic yet entirely fabricated images, videos, or audio, has created a new wave of…
The Challenge of Vulnerability Remediation When a vulnerability is identified, teams must determine the best approach to fixing it. This involves analyzing the vulnerability’s impact,…
The Oligo Research team has disclosed a critical vulnerability in Meta’s widely used Llama-stack framework. This vulnerability, tracked as CVE-2024-50050, allows remote attackers to execute arbitrary…
