Check Point ties a Windows zero-day to Lazarus attacks on defense firms using fake job offers.
Kaspersky says the Head Mare group exploited a two-flaw chain in unpatched TrueConf servers to poison client installers with the…
VulnCheck found a phone-home implant in Zbtlink router firmware while the vendor called it a maintenance feature.
A South Korean joint advisory warns that compromised websites silently infected visitors through AnySign4PC flaws.
Kaspersky ties two memory-resident backdoors to government network intrusions across Central Asia.
WP-SHELLSTORM crew exposed after leaving server open, revealing 1.4M site targets and mass webshell operations
Five AsyncAPI npm packages with 2.9 million weekly downloads were trojanized after a GitHub Actions token theft.
GigaWiper is a modular Golang backdoor that merges remote access tools with disk wiping and fake ransomware capabilities.
Sign in to your account