Malware & Ransomware
View allVulnerabilities
View allVulnerabilities
Patch MISP Modules to stop unauthenticated API key leakage
An unauthenticated flaw in MISP Modules exposes external tool credentials, allowing attackers to impersonate the instance and access enrichment services.
Offensive AI
View allCyber Attacks
View allCyber Attacks
Update Chrome Immediately to Patch CISA-Listed Zero-Day Vulnerability
Cyber Attacks
Block Judicial Lures to Stop Blind Eagle RAT Delivery
Cyber Attacks
Secure exposed refrigeration controllers against remote manipulation attacks
Cyber Attacks
Block Fake Streaming Apps to Stop Mirax Android Bank Theft
Latest news
Vulnerabilities
Patch Microsoft Office Excel to Stop Remote Code Execution via Buffer Overflow
Microsoft warns that a high-severity stack-based buffer overflow in Excel allows unauthorised attackers to execute code over a network.
Vulnerabilities
Block NervesHub CLI login links to prevent account takeover
Unauthenticated attackers can hijack API tokens in NervesHub versions before 2.5.3 via a session fixation flaw.
Vulnerabilities
Patch urgent D-Link M60 MQTT flaw: Remote attackers use hard-coded creds to bypass auth
A critical flaw in D-Link M60 firmware 1.12.B01 allows remote attackers to bypass authentication via hard-coded credentials in the MQTT broker configuration.
Vulnerabilities
Secure SAP Web Intelligence against critical file-read flaw
A critical vulnerability in SAP BusinessObjects allows authenticated attackers to read sensitive server files and reach internal systems.
Vulnerabilities
Patch Kubeflow Pipelines to stop unauthorised shared pipeline uploads
A critical flaw in Kubeflow Pipelines lets low-privilege users inject malicious code into shared cluster pipelines by bypassing authorisation checks.
Vulnerabilities
Patch CompuGroup Medical systems to stop critical update code execution flaw
A critical vulnerability in CompuGroup Medical software allows attackers to bypass authenticity checks and execute arbitrary code during updates.
Vulnerabilities
Stop OpenEMR Token Replay Attacks Before Patient Data Is Exposed
A critical flaw in OpenEMR allows attackers to replay authentication tokens and brute-force PINs, granting unauthorised access to patient records.
Vulnerabilities
Update TOTOLINK CA300-PoE firmware to block WAN config buffer overflow exploit
A public exploit targets a buffer overflow in TOTOLINK router firmware, allowing remote attackers to compromise devices via WAN configuration inputs.