The vulnerability was found in the search query field, which failed to properly sanitize input. The website was perfectly sanitizing.

Imagine reaching out to a brand on social media for support and unknowingly walking into a scammer’s trap. That’s the danger of angler…

Hello fellow defenders! It’s TopCyberDawg here still taking down ALL the alerts from the SOC on the LetsDefend platform. In my pursuit to…

By Shahd Qishta

Shopaholics Anonymous: Billionaire division

SeamlessPass is a tool designed to obtain Microsoft 365 access tokens using on-premises Active Directory Kerberos tickets

IAMActionHunter is an IAM policy statement parser and query tool aims to simplify the process of collecting

MDE Kit's objective is to help automate and empower your investigation, detection, prevention, and response capabilities leveraging the MDE API

Critical security vulnerability (CVE-2023-37936) affecting FortiSwitch product line. Learn about the impact, mitigation, and recommended patches.

Stay informed about the escalating threat of cryptocurrency thefts by North Korean cyber actors. Learn about their malicious activities and the impact on the global financial system.

Stay protected from CVE-2024-12084 and other vulnerabilities in Rsync. Learn about the risks, exploits, and how to secure your systems.

U.S. authorities successfully neutralize Chinese state-sponsored cyber espionage threat by deleting PlugX malware.

Ivanti Endpoint Manager security advisory: Learn about the critical vulnerabilities, including CVE-2024-10811, posing a serious risk to enterprise systems.

Protect your sensitive information from disclosure and mitigate potential risks with the latest Zoom updates. Read about CVE-2025-0147 and other vulnerabilities.

Learn about the concerning supply chain attack targeting popular Node.js libraries, chokidar and chalk, and how developers can protect their projects.

Discover the concerning campaign targeting Fortinet FortiGate firewalls. Learn how threat actors exploited vulnerabilities and established unauthorized access.

Protect your WordPress website from the WP3.XYZ malware attack. Learn how to detect and prevent unauthorized admin accounts, malicious plugins, and data exfiltration.