CoffeeLoader uses GPU-powered Armoury Packer to evade EDR and antivirus systems, enhancing malware delivery and evasion tactics.
Firefox addresses a vulnerability similar to Chrome’s recent zero-day patch, enhancing security for users amid rising threats targeting Russian entities.
Mozilla fixes a critical Firefox vulnerability, mirroring a recent zero-day issue in Chrome, enhancing user security and browser integrity.
Nine-year-old npm packages compromised to steal API keys through obfuscated code, highlighting security risks in outdated dependencies.
OpenAI launches a security initiative offering rewards for discovering critical bugs, enhancing safety and reliability in its AI systems.
Discover the top 4 WordPress vulnerabilities exploited by hackers in Q1 2025 and learn how to protect your site from potential threats.
Hackers modify RansomHub’s EDRKillShifter to enhance Medusa, BianLian, and Play ransomware attacks, increasing their evasion capabilities.
Mozilla warns Windows users of a critical Firefox sandbox vulnerability that could expose systems to security risks. Update recommended immediately.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
CEO of CrushFTP addresses VulnCheck’s CVE on the critical Make-Me-Admin vulnerability, emphasizing swift action and commitment to security.
Discover the top 3 MS Office exploits hackers will target in 2025 and learn how to protect your data from these emerging threats.
A vulnerability in NetApp SnapCenter enables remote admin access on plug-in systems, posing significant security risks to data management environments.
CISA warns of Sitecore RCE vulnerabilities with active exploits targeting Next.js and DrayTek devices. Stay informed and secure your systems.
US defense contractor acknowledges security failures and reaches a settlement following whistleblower claims, highlighting critical industry vulnerabilities.
Malicious npm package compromises the local ‘ethers’ library, enabling reverse shell attacks and exposing developers to significant security risks.
Local packages compromised in a new npm attack, introducing backdoors that threaten security. Stay informed to protect your projects.
Google addresses a critical Chrome zero-day vulnerability exploited in espionage attacks, enhancing security for users worldwide.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Critical security vulnerabilities found in VMware Tools and CrushFTP pose high risks with no available mitigation options. Immediate action is advised.
Google releases an urgent Chrome patch to address a critical exploit linked to Russian espionage, enhancing user security and privacy.
Urgent: CrushFTP warns users to patch an unauthenticated access vulnerability to protect against potential security breaches. Act now!
Broadcom warns users of a VMware Windows Tools vulnerability allowing authentication bypass, urging immediate updates to enhance security.
Windows zero-day vulnerability exposes NTLM hashes; an unofficial fix has been released to mitigate the risk. Stay secure with this essential update.
Discover how EncryptHub is linked to MMC zero-day exploits in Windows systems, revealing critical security vulnerabilities and their implications.
Discover how EncryptHub is linked to zero-day attacks on Windows systems, exposing vulnerabilities and highlighting the need for enhanced cybersecurity measures.
Ingress-Nginx vulnerability exposes public Kubernetes clusters to security risks, highlighting the need for immediate patching and enhanced protection measures.