Collaborate Disseminate
The new PG_MEM malware targets PostgreSQL databases, exploiting weak passwords to deliver payloads and mine cryptocurrency. Researchers warn… Continue reading New PG_MEM Malware Targets PostgreSQL Databases to Mine Cryptocurrency
ALBeast is a critical vulnerability that allows attackers to bypass authentication and authorization in AWS ALB-based applications. Learn… Continue reading ALBeast: Misconfiguration Flaw Exposes 15,000 AWS Load Balancers to Risk
Cybercriminals exploit Progressive Web Apps (PWAs) in the latest phishing scam, targeting mobile users in Czechia, Hungary, and… Continue reading New Phishing Attacks Target Eastern European Bank Users on iOS and Android
Meet TodoSwift, a malicious application that masquerades as a PDF downloader. Crafted by the BlueNoroff threat group, TodoSwift leverages… Continue reading TodoSwift Malware Targets macOS, Disguised as Bitcoin PDF App
Cisco Talos reveals 8 vulnerabilities in Microsoft’s macOS apps, exploiting TCC framework weaknesses. Hackers can bypass security, inject… Continue reading Hackers Could Exploit Microsoft Teams on macOS to Steal Data
A critical 7-year-old security flaw in a pre-installed app on millions of Google Pixel devices has been exposed.… Continue reading 7-Year-Old Pre-Installed Google Pixel App Flaw Puts Millions at Risk
Discover how GitHub Actions artifacts leak sensitive authentication tokens, exposing popular open-source projects to security risks. Learn about… Continue reading ArtiPACKED Flaw Exposed GitHub Actions to Token Leaks
A sophisticated ValleyRAT campaign is targeting Chinese Windows users. Learn about the malware’s multi-stage attack, its ability to… Continue reading New ValleyRAT Malware Targets Chinese Windows Users in Multi-Stage Attack
Discover how researchers exploited vulnerabilities in Google’s Quick Share to achieve remote code execution (RCE). Learn about the… Continue reading Google Patches Critical Vulnerabilities in Quick Share After Researchers’ Warning
Russian hacking group Midnight Blizzard breached the UK Home Office, stealing sensitive data. Learn how they exploited supply… Continue reading Russian Midnight Blizzard Breached UK Home Office via Microsoft