Latest news

A Sophisticated New Threat: FvncBot Strikes Again
Malware

A Sophisticated New Threat: FvncBot Strikes Again

7 December 2025 dark6

A dangerous new banking malware called FvncBot is targeting unsuspecting users of Android devices, leveraging sophisticated techniques to steal sensitive...
ShadyPanda’s Seven-Year Heist: How a Simple Extension Became a Mass Spy Tool
Spyware

ShadyPanda’s Seven-Year Heist: How a Simple Extension Became a Mass Spy Tool

2 December 2025 dark6

A sophisticated threat group, dubbed ShadyPanda, has quietly exploited millions of users across the world by weaponizing popular Chrome and...
Critical Roundcube vulnerability (CVE-2025-49113): exploit sold in Darknet as “Email Armageddon” looms
Vulnerability

Critical Roundcube vulnerability (CVE-2025-49113): exploit sold in Darknet as “Email Armageddon” looms

6 June 2025 securebulletin.com

A decade-old Remote Code Execution (RCE) flaw in Roundcube, the widely used open-source email client, has escalated into a global...
Critical Remote Code Execution vulnerability discovered in GiveWP WordPress Plugin (CVE-2025-0912)
Vulnerability

Critical Remote Code Execution vulnerability discovered in GiveWP WordPress Plugin (CVE-2025-0912)

5 March 2025 securebulletin.com

A critical security vulnerability, identified as CVE-2025-0912, has been discovered in the GiveWP WordPress donation plugin. This flaw potentially exposes...
Critical RCE vulnerabilities in Ivanti Endpoint Manager grant remote server access to attackers
Vulnerability

Critical RCE vulnerabilities in Ivanti Endpoint Manager grant remote server access to attackers

10 September 2024 dark6

Ivanti has released security updates for its Endpoint Manager (EPM) 2024 and 2022 SU6 versions to address multiple severe and...