Page 37 - Oftware Vulnerability News Today

Researchers have identified a new Chinese malware attack framework that includes a C2 framework called "Alchimist" and malware called "Insekt."

A new report shows how BazaCall callback phishing attack operators keep updating their social engineering tactics to deploy malware.

A new timing attack against the npm registry API could expose private packages used by organizations, putting developers at risk of attacks.

Understanding the connection between Governance, Risk, and Compliance (GRC) and cybersecurity

There is a new exploit, ProxyNotShell, being exploited in the wild to take advantage of the recent Microsoft exchange vulnerabilities.

The Latest Funding News and What it Means for Cyber Security in 2023

Microsoft's Patch Tuesday updates this month fix 85 vulnerabilities, including an actively exploited Windows Zero Day vulnerability.

Researchers warn of a recently reported critical RCE vulnerability (CVE-2022-36067 / CVSS 10) in the popular vm2 JavaScript sandbox.

Researchers have outlined the increasingly sophisticated malware tools employed by a cyber espionage group called Earth Aughisky.

Researchers have discovered a threat cluster linked to Sandworm that continues to target Ukraine with commodity malware.