A new sophisticated payment fraud technique called "Ghost Tap" has been discovered by ThreatFabric researchers, targeting NFC-based payment systems like Google Pay and Apple Pay....
A series of critical security vulnerabilities have been discovered in the needrestart package, affecting multiple Linux distributions including Ubuntu Server (since version 21.04) and Debian. These vulnerabilities, present since 2014, pose significant security risks by allowing local attac...
Cisco reported active exploitation of CVE-2014-2120, a vulnerability in their Adaptive Security Appliance (ASA) from 2014, rated with a CVSS score of 4.3. The flaw enables remote attackers to execute cross-site scripting attacks via ASA's WebVPN login page when users interact with maliciou...
A newly discovered phishing campaign uses deliberately corrupted Microsoft Office files and ZIP archives to bypass security measures. The attack exploits built-in recovery mechanisms while evading antivirus software and filters, using QR codes to direct victims to malware sites and phishin...
Critical security vulnerability (CVE-2024-10905) discovered in SailPoint IdentityIQ IAM software allows unauthorized access to protected content through HTTP, affecting multiple versions prior to recent patches. The flaw carries maximum CVSS score of 10.0 and stems from improper file name ...
