Top Cybersecurity News

XSS vulnerability allowed penetrating Google’s internal systems

Back in February of this year, 16-year-old bug-hunter from their Czech Republic, Thomas Orlita, discovered a dangerous vulnerability in a Google backend application. Discovered bug allowed stealing cookies from company’s internal applications and user’s cookies,…

Critical bug in the Evernote extension has put millions of users at risk

Millions of unpatched Exim mail servers are now under active attack

Researchers taught Rowhammer to steal data

Vulnerability in Vim and Neovim editors leads to code execution while opening a malicious file

Austrian scientists created method of tracing browsers with the use of JavaScript

Vulnerability in WP Live Chat Support plugin allows stealing logs and insert messages in chats

Attackers actively exploit previously discovered vulnerability in Oracle WebLogic

RIG exploit suite is now being used to deliver a new Buran encryption tool to users

In Diebold Nixdorf ATMs detected RCE-vulnerability

APT group MuddyWater expanded its arsenal and uses new attack vectors

Cybercriminal with nick Achilles has put up for sale access to the internal networks of Symantec, Comodo and UNICEF

57% of mail-servers have critical vulnerability

0patch experts fixed one of the holes that legendary SandboxEscaper left in Windows security

Participant in the Metasploit project created a working module for exploiting the BlueKeep vulnerability

Cisco Talos: Cybercriminals like Dr. Frankenstein collect malware for attacks from disparate components

Another tool of the Iranian government cyber espionage group APT34 leaked to the Internet

Vulnerabilities in rkt allow bypassing the container and get root permissions on the host

Microsoft Azure turned out to be an excellent service for storing malware and cybercriminal infrastructure

GandCrab malware operators are winding down their activity