Security News
A recently discovered exploit kit (EK) has been used in a campaign targeting users in Japan, Korea, the Middle East, Southern Europe, and other countries in the Asia Pacific region. read more
The PowerPool gang launched its attack just two days after the zero-day in the Windows Task Scheduler was disclosed.
Don't wait for Patch Tuesday – check out these mitigations The Windows APLC security hole that emerged early last week remains unpatched, even though it is being actively exploited by hackers to...
A Monero cryptomining script is spreading in an ongoing campaign using the recently disclosed critical remote command-execution flaw.
Exploit Code Published After Disclosure Process Appears to Have Gone SidewaysMicrosoft appears set to patch a zero-day local privilege escalation vulnerability after a research published...
Details of an unpatched vulnerability in Microsoft’s Windows 10 operating system were made public on Monday, via Twitter. read more
The Apache Software Foundation revealed last week the existence of a critical Apache Struts flaw (CVE-2018-11776) similar to the one exploited in the Equifax breach and urged organizations and...
Exploit code for a read more
Researchers find proof-of-concept code that can take advantage of the recently identified Apache Struts framework (CVE-2018-11776) vulnerability.
Attackers can abuse URL requests processed by an email program for Mac to steal files from the victim -- sometimes without user interaction.