CVE-2024-50603 in Aviatrix Controller enables remote code execution, cryptomining, and backdoor attacks. Patch now.

This week in cybersecurity: zero-day exploits, advanced malware, and the latest hacking tricks you need to know about.

Malicious JavaScript in WordPress checkout pages steals payment data, hides in wp_options, and exfiltrates encrypted details.

Hijacked 4,000+ backdoors via expired domains for $20, exposing government, academic, and private systems globally.

In 2024, ransomware attacks targeting VMware ESXi servers reached alarming levels, with the average ransom demand ...

The U.S. Department of Justice (DoJ) on Friday indicted three Russian nationals for their alleged involvement in operating ...

Microsoft takes legal action against a hacking group using stolen Azure API keys to create harmful AI-generated content.

Banshee Stealer, a $3,000/month macOS malware, resurfaces with XProtect encryption, targeting 100M users via phishing ...

Google Project Zero researcher Natalie Silvanovich, who discovered and reported the shortcoming, described it as requiring no ...

Lumma, XWorm, and LockBit posed serious threats in 2024. Learn how ANY.RUN’s sandbox detects malware tactics, including ...

The guide— " Taking the Pain Out of Cybersecurity Reporting " —walks you through how to transform raw data into compelling ...

"The malware then runs the XMRig miner, using the command-line arguments inside the downloaded configuration text file," ...