Curl vulnerability exposes user credentials in redirects
A recently discovered vulnerability in cURL, identified as CVE-2024-11053, poses a significant risk by potentially exposing user credentials during HTTP…
Cryptojacking: protecting Docker and Kubernetes environments from new attacks
Cryptojacking—the unauthorized use of systems to mine cryptocurrency—has seen a troubling surge, with attackers increasingly exploiting misconfigured Docker and Kubernetes…
QNAP NAS vulnerabilities
QNAP NAS systems, widely used for data storage, have been flagged for several critical vulnerabilities that pose significant risks to…
Apache Tomcat vulnerability (CVE-2024-38286)
A severe vulnerability has emerged in Apache Tomcat, a widely used Java application server. Identified as CVE-2024-38286, this flaw poses…
Windows MiniFilter vulnerability: a threat to EDR security
Endpoint Detection and Response (EDR) solutions are essential for modern cybersecurity defenses. However, research has revealed a vulnerability in Windows…
PRC-Linked cyber actors leveraging massive botnet for malicious activities
In a joint cybersecurity advisory, the FBI, Cyber National Mission Force (CNMF), and National Security Agency (NSA) have exposed a…
Critical Windows kernel vulnerability disclosed
Microsoft has issued an urgent warning regarding a critical Windows kernel vulnerability (CVE-2024-37985) that could result in the disclosure of…
Apple iOS 18 patches 32 security flaws
Apple has released iOS 18, a major software update that addresses a multitude of security vulnerabilities across its operating system.…
Critical macOS Calendar vulnerability: zero-click execution of malicious code
A severe zero-click vulnerability has been discovered within Apple’s macOS Calendar application, posing a significant threat to user security. This…