Astoria (unverified) – 11,498,146 breached accounts
In January 2021, the lead generation company Astoria Company allegedly suffered a data breach which exposed over 11M unique email...
In January 2021, the lead generation company Astoria Company allegedly suffered a data breach which exposed over 11M unique email...
An IT contractor working for an IT consultancy company took it upon himself to perform an act of revenge against...
Last week, we looked at a Royal Mail themed scam which has very quickly become the weapon of choice for...
Different local councils in the UK have conveyed SMS to a huge number of citizens to encourage them to cover...
Tesla CEO Elon Musk commented in Russian on the news that Russian Egor Kryuchkov had pleaded guilty on Twitter on...
The United States has sentenced nationals from Russia and North Macedonia to prison for their roles in a transnational cybercrime...
A few days ago, on 17th March, MangaDex found that a malicious actor, who already had access to an administrative...
Malware trackers at Google keep on pointing out a complex APT group that burned through at least 11 zero-days exploits...
A library to enhance and speed up script/exploit writing for CTF players (or security researchers, bug bounty hunters, pentesters but...
A golang tool that uses the dehashed.com API to search for compromised assets. Results can then be compiled into a...
This blog post is part of an ongoing series about evaluating Managed Detection and Response (MDR) providers. For more insights,...
In recent weeks, there has been quite a lot of reporting on the exploitation of the latest disclosed vulnerabilities in...
Google addressed a zero-day vulnerability affecting Android devices that use Qualcomm chipsets which is actively exploited in the wild. Google...
U.S. Cybersecurity & Infrastructure Security Agency (CISA) warns of flaws in GE Power Management Devices that could allow an attacker...
Oil and gas giant Royal Dutch Shell (Shell) discloses a data breach resulting from the compromise of its Accellion File...
The Ministry of Defence academy was hit by a major cyber attack, Russia and China state-sponsored hackers are suspected to...
Adobe has released security updates to address a critical vulnerability in the ColdFusion product (versions 2021, 2016, and 2018) that could lead...
Experts uncovered critical flaws in the Netop Vision Pro distance learning software used by many schools to control remote learning...
Summary: Microsoft Office Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24108, CVE-2021-27059. Reference Links(if available): https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27057 https://www.zerodayinitiative.com/advisories/ZDI-21-334/...
Summary: Cloud Manager versions prior to 3.9.4 contain an insecure Cross-Origin Resource Sharing (CORS) policy which could allow a remote...
Summary: Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability which could allow a remote attacker to cause...
Summary: The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to...
Summary: SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary...
A bill introduced in the US Senate could help domestic abuse and sex trafficking survivors—including those tracked by stalkerware-type applications—regain...