The cybersecurity landscape faces a new threat as the group known as EncryptHub exploits a recently patched Windows zero-day vulnerability. They are deploying various malware… Прочетете повече »Unveiling the EncryptHub Attack: Exploitation of Windows Zero-Day to Deploy Malicious Malware
March 24, 2025 – A new and alarming ransomware-as-a-service (RaaS) operation has emerged, named VanHelsing, which has already claimed three victims since its launch on… Прочетете повече »VanHelsing RaaS Launch: A Menacing Trio of Victims, $5K Entry Fee, Multi-OS Capability, and Double Extortion Tactics
In today’s digital environment, maintaining robust network security is a critical priority for organizations. Despite significant investments in technology like firewalls and SIEM systems, many… Прочетете повече »10 Overlooked Network Pentest Issues That Can Expose Your Security
Cybersecurity researchers have disclosed details of a new supply chain attack vector dubbed Rules File Backdoor that affects artificial intelligence (AI)-powered code editors like GitHub… Прочетете повече »New ‘Rules File Backdoor’ Attack Lets Hackers Inject Malicious Code via AI Code Editors
In recent years, cyberattacks on healthcare facilities have evolved from mere financial nuisances to potentially lethal threats. As hospitals become increasingly dependent on digital systems,… Прочетете повече »The Growing Threat: How Cyberattacks on Hospitals Are Becoming Deadly
Unauthorized CI/CD Pipeline Execution A severe security vulnerability has been identified and patched in GitLab’s platform. The most critical issue (tracked as CVE-2024-9164) enables attackers… Прочетете повече »GitLab Faces Critical CI/CD Vulnerability Impacting Multiple Versions
A vulnerability has been identified in OpenSSH, a widely-used toolkit for remote management of *nix systems. This flaw permits an unauthenticated attacker to execute arbitrary… Прочетете повече »CVE-2024-6387: regreSSHion vulnerability in OpenSSH
More than 100,000 websites have been affected by a supply chain attack involving the Polyfill.io service. After a Chinese company acquired the domain, they altered… Прочетете повече »Polyfill supply chain attack impacts over 100k websites
Researchers at cybersecurity firm DEVCORE have identified a critical remote code execution (RCE) vulnerability, designated as CVE-2024-4577, in the PHP programming language. This flaw, which… Прочетете повече »Severe PHP Vulnerability CVE-2024-4577 Puts Millions of Windows Servers at Risk of Remote Code Execution
Cybersecurity researchers have alerted that several critical security flaws in WordPress plugins are currently being exploited by malicious actors to create unauthorized administrator accounts for… Прочетете повече »Researchers Uncover Active Exploitation of Vulnerabilities in WordPress Plugins
BG 
EN