Latest news

E-commerce vulnerabilities exposed: the Magento skimmer incident
Vulnerability

E-commerce vulnerabilities exposed: the Magento skimmer incident

26 August 2024 dark6

A recent cyberattack targeting Magento, a widely used e-commerce platform, has raised significant concerns within the cybersecurity community. Hackers have...
Vulnerabilities in Google’s Quick Share could lead to remote code execution
Vulnerability

Vulnerabilities in Google’s Quick Share could lead to remote code execution

12 August 2024 dark6

Recent findings have spotlighted significant security vulnerabilities in Google’s Quick Share, a file-sharing tool that works across Android, Windows, and...
Critical zero-day vulnerability in Microsoft Office: CVE-2024-38200
Vulnerability

Critical zero-day vulnerability in Microsoft Office: CVE-2024-38200

11 August 2024 dark6

On August 8th, Microsoft revealed a significant zero-day vulnerability, tracked as CVE-2024-38200, affecting multiple versions of its Office suite with...
Nexera suffers $1.8 million breach amidst security vulnerabilities
Vulnerability

Nexera suffers $1.8 million breach amidst security vulnerabilities

11 August 2024 dark6

Nexera, a blockchain infrastructure protocol known for its tokenization solutions, recently experienced a significant security breach that resulted in the...
A vulnerability unveiled: the 0.0.0.0 threats to browser security
Vulnerability

A vulnerability unveiled: the 0.0.0.0 threats to browser security

8 August 2024 dark6

A recent study by Oligo Security has revealed a critical vulnerability impacting the world’s leading web browsers for the past...
Urgent security update: vulnerabilities addressed in Apache Linkis
Vulnerability

Urgent security update: vulnerabilities addressed in Apache Linkis

6 August 2024 dark6

Apache Linkis, a vital middleware for connecting applications to various data processing engines, has recently patched two significant security vulnerabilities...
Twilio discontinues Authy desktop service amidst investor pressures
Vulnerability

Twilio discontinues Authy desktop service amidst investor pressures

4 August 2024 dark6

Twilio has officially terminated its Authy desktop service, a move that will impact users who previously relied on the desktop...
Apache superset security update: addressing CVE-2024-34693
Vulnerability

Apache superset security update: addressing CVE-2024-34693

29 July 2024 dark6

The Apache Software Foundation has released critical security updates to mitigate an arbitrary file read vulnerability (CVE-2024-34693) in Apache Superset....
False File Immutability (FFI) Vulnerability
Vulnerability

False File Immutability (FFI) Vulnerability

23 July 2024 dark6

A newly discovered vulnerability class, termed “False File Immutability” (FFI), has been identified by Gabriel Landau of Elastic Security, exposing...
Unveiling a Critical Vulnerability in Elementor: A Deep Dive and Urgent Call to Action on WordPress
Vulnerability

Unveiling a Critical Vulnerability in Elementor: A Deep Dive and Urgent Call to Action on WordPress

8 December 2023 dark6

Discover and address a critical Elementor vulnerability with insights from our cybersecurity analysis. Upgrade to version 3.18.2 for enhanced website...
Critical Vulnerability Threatens the Core of MLflow
AI

Critical Vulnerability Threatens the Core of MLflow

6 December 2023 dark6

Explore the profound implications of CVE-2023-43472, a critical vulnerability in MLflow, unraveling the threats to machine learning models and data...
Critical Vulnerability in Adobe ColdFusion Puts Government Servers at Risk
Vulnerability

Critical Vulnerability in Adobe ColdFusion Puts Government Servers at Risk

5 December 2023 dark6

Discover the latest cybersecurity threat as Adobe ColdFusion becomes the target of a severe vulnerability. Learn about CVE-2023-26360 and its...