Latest news

Persistent backdoors via Linux pluggable authentication modules: a new threat
Spyware

Persistent backdoors via Linux pluggable authentication modules: a new threat

6 September 2024 dark6

Recent research by the Group-IB Digital Forensics and Incident Response (DFIR) team has revealed a novel technique exploiting Linux’s Pluggable...
Critical Progress LoadMaster vulnerability: unauthenticated code execution
Vulnerability

Critical Progress LoadMaster vulnerability: unauthenticated code execution

6 September 2024 dark6

A severe vulnerability (CVE-2024-7591) has been discovered in the Progress LoadMaster product line, including all releases and the Multi-Tenant (MT)...
Google Chrome update: enhancing security with version 128.0.6613
Vulnerability

Google Chrome update: enhancing security with version 128.0.6613

5 September 2024 dark6

In the ever-evolving landscape of cybersecurity, Google has rolled out significant updates for its Chrome Stable and Extended Stable channels,...
Addressing the critical CVE-2024-7261 vulnerability in Zyxel devices
Vulnerability

Addressing the critical CVE-2024-7261 vulnerability in Zyxel devices

5 September 2024 dark6

In a concerning development for network security, Zyxel has recently issued patches to address a critical operating system (OS) command...
YubiKey vulnerability: understanding the EUCLEAK threat
Vulnerability

YubiKey vulnerability: understanding the EUCLEAK threat

5 September 2024 dark6

In the ever-evolving landscape of cybersecurity, even the most trusted tools can fall prey to vulnerabilities. Recently, security researchers at...
North Korean hackers exploit Chromium zero-day vulnerability
Vulnerability

North Korean hackers exploit Chromium zero-day vulnerability

4 September 2024 dark6

In the ever-evolving landscape of cybersecurity, the Chromium-based web browsers, such as Google Chrome and Microsoft Edge, have become prime...
Zero-day vulnerability CVE-2024-7971 and the threat posed by Citrine Sleet
Vulnerability

Zero-day vulnerability CVE-2024-7971 and the threat posed by Citrine Sleet

3 September 2024 dark6

Recent findings by Microsoft have shed light on a significant cybersecurity threat emerging from North Korea. The discovery of a...
A critical vulnerability in Mirai botnet: remote DoS exploit discovered
Vulnerability

A critical vulnerability in Mirai botnet: remote DoS exploit discovered

26 August 2024 dark6

Recent investigations into the Mirai botnet have unveiled a significant remote denial-of-service (DoS) exploit, identified as CVE-2024-45163. This vulnerability was...
E-commerce vulnerabilities exposed: the Magento skimmer incident
Vulnerability

E-commerce vulnerabilities exposed: the Magento skimmer incident

26 August 2024 dark6

A recent cyberattack targeting Magento, a widely used e-commerce platform, has raised significant concerns within the cybersecurity community. Hackers have...
Vulnerabilities in Google’s Quick Share could lead to remote code execution
Vulnerability

Vulnerabilities in Google’s Quick Share could lead to remote code execution

12 August 2024 dark6

Recent findings have spotlighted significant security vulnerabilities in Google’s Quick Share, a file-sharing tool that works across Android, Windows, and...
Critical zero-day vulnerability in Microsoft Office: CVE-2024-38200
Vulnerability

Critical zero-day vulnerability in Microsoft Office: CVE-2024-38200

11 August 2024 dark6

On August 8th, Microsoft revealed a significant zero-day vulnerability, tracked as CVE-2024-38200, affecting multiple versions of its Office suite with...
Nexera suffers $1.8 million breach amidst security vulnerabilities
Vulnerability

Nexera suffers $1.8 million breach amidst security vulnerabilities

11 August 2024 dark6

Nexera, a blockchain infrastructure protocol known for its tokenization solutions, recently experienced a significant security breach that resulted in the...