Balaji N

Securonix Threat Research team has uncovered a sophisticated tax-related phishing campaign that employs Microsoft Common Console Document (MSC) files and advanced obfuscation techniques to deliver a stealthy backdoor payload.

A critical Remote Code Execution (RCE) vulnerability ( CVE-2024-6386 ), affecting over 1,000,000 active installations of the WordPress Multilingual Plugin (WPML).

A critical security vulnerability has been identified in Apache Struts, a popular open-source framework for building Java-based web applications actively using in attacks leveraging publish PoC that allows attackers to execute malicious files on the server.

Researchers have uncovered a new strain of DDoS malware, named cShell, targeting poorly managed Linux servers.

Cybercriminals are leveraging the inherent user-friendly features of Google Calendar and Google Drawings to launch phishing attacks that impersonate legitimate sources.

To address these challenges, Microsoft Sentinel has introduced a new agentless integration capability for SAP workloads, providing a streamlined and efficient approach to SAP security.

In a significant step towards empowering the global developer community, GitHub has announced the launch of GitHub Copilot Free.

The Cybersecurity and Infrastructure Security Agency (CISA) has unveiled an updated version of the National Cyber Incident Response Plan (NCIRP), a strategic framework for coordinating how federal, state, local, tribal, and territorial (SLTT) governments, private sector entities, and international partners address significant cyber incidents under Presidential Policy Directive 41 (PPD-41).

Phishing attacks continue to evolve, leveraging legitimate platforms and services to deceive unsuspecting victims.

A sophisticated new Ransomware family, dubbed NotLockBit, is creating waves in the cybersecurity world with its advanced capabilities