Cybersecurity News

The Masjesu DDoS botnet is escalating attacks against internet-connected devices, combining stealthy techniques with large-scale firepower to overwhelm targets and frustrate defenders. Recent analysis shows the malware’s operators …

The Ninja Forms vulnerability is under active exploitation, enabling unauthenticated takeover of WordPress sites running the popular form builder. The flaw is tracked as CVE-2024-43917. The widely deployed …

Ivanti zero-day vulnerabilities in Connect Secure and Policy Secure are being actively exploited, prompting urgent patching and incident response across enterprises. Attackers are chaining flaws for full compromise. …

The Flowise vulnerability is under active exploitation, with attackers scanning and compromising exposed instances for remote code execution and secret theft. Security teams should act immediately. Verified incidents …

The Android Strongbox vulnerability has been fixed by Google with patches for CVE-2024-31317, restoring hardware-backed keystore protections on supported devices. The flaw affects StrongBox Keymaster, which secures cryptographic …

Grafana vulnerability researchers disclosed GrafanaGhost (CVE-2024-9264), a flaw that enables unauthorized data access via abused dashboard and data source functions. The issue affects multi-tenant and legacy Grafana environments …

Microsoft zero-day exploit warnings intensified after a public proof‑of‑concept surfaced online, raising immediate risk for Windows and Office users worldwide. The disclosure increases the likelihood of rapid weaponization …

GPU rowhammer attack researchers disclosed GPUBreach, a practical technique that flips DRAM bits from the GPU and chains the fault with an AMD driver bug to gain root …

Medusa Ransomware is increasingly leveraging unpatched vulnerabilities to gain initial access and accelerate enterprise compromise. Recent incident analyses show a clear pivot from email-led intrusion to vulnerability-driven break-ins …

REvil ransomware leader identification by German authorities marks a major step in attributing command roles within a notorious ransomware-as-a-service ecosystem. Investigators linked infrastructure, finance, and affiliates to reach …