Cybersecurity experts have recently discovered a critical vulnerability in the macOS operating system. This flaw could lead to the exposure of system passwords and confidential user data, allowing unauthorized access by malicious actors. Security analyst Noah Gregory from WTS.Dev has…

Kali Linux, one of the leading operating systems in cybersecurity, has released a new version – Kali Linux 2025.1a! This update includes improvements to desktop environments, new tools, and enhanced usability. If you are a Kali Linux user, you can…

In today’s world, software development processes are becoming increasingly automated. GitHub Actions is a convenient and efficient CI/CD tool for developers. However, a critical vulnerability was recently discovered in the popular “tj-actions/changed-files” GitHub Action, putting more than 23,000 repositories at…

In the modern world of cybersecurity, any software vulnerability can pose a significant threat. The recently discovered CVE-2024-4577 vulnerability is a clear example of this. This flaw allows attackers to remotely execute malicious code through the PHP-CGI module on Windows…

Cybersecurity researchers have recently disclosed a critical vulnerability (CVE-2024-36904) in the Linux kernel that remained unnoticed for seven years. This use-after-free vulnerability could allow attackers to execute arbitrary code within the system’s core processes. A Proof-of-Concept (PoC) exploit demonstrating the…

A major update in the cybersecurity world – the release of Cobalt Strike 4.11, a popular Red Team tool. This version introduces significant improvements in stealth (evasion) techniques, making it more effective at bypassing modern security systems. The update includes…

In recent years, cybercriminals have been mastering innovative techniques to bypass security systems. One such method is BitM (Browser-in-the-Middle), a new attack tactic that allows hackers to hijack user sessions within seconds and gain access to their systems. What makes…

On March 17, 2025, Google officially introduced OSV-Scanner V2.0.0. This updated tool significantly enhances the ability of security professionals to identify and remediate vulnerabilities in software. Initially launched in December 2022, OSV-Scanner has secured its place among open-source security tools.…

A remote code execution (RCE) vulnerability in Apache Tomcat, identified as CVE-2025-24813, is actively being exploited by cybercriminals. This vulnerability allows attackers to gain full control over the server. According to security experts, exploitation of this vulnerability is rapidly increasing.…

Adobe Acrobat Reader, an essential tool for document exchange and official paperwork, has been found to contain three critical vulnerabilities. These flaws could allow attackers to execute arbitrary code or disclose sensitive information. The vulnerabilities were discovered by Cisco Talos…