A serious security vulnerability has been discovered in Parallels Desktop, a popular virtualization software used to run Windows and other operating systems on Mac. The CVE-2024-34331 0-Day vulnerability allows attackers to gain root-level privileges on macOS. What’s most concerning is…

The Wireshark Foundation has released version 4.4.4 of its popular network protocol analyzer. This update fixes a high-risk vulnerability, CVE-2025-1492, which allowed attackers to send malicious packets and launch Denial-of-Service (DoS) attacks. This vulnerability was linked to Wireshark’s Bundle Protocol…

The CL0P ransomware group has intensified its attacks against critical infrastructure sectors, leading to widespread data breaches and system encryptions in telecommunications and healthcare organizations worldwide. By exploiting a newly discovered zero-day vulnerability (CVE-2024-50623) in Cleo integration software, the attackers…

Apache Ignite is a distributed in-memory database platform that enables rapid processing and storage of large volumes of data. However, a critical vulnerability, identified as CVE-2024-52577, was recently discovered in the platform. This vulnerability could allow attackers to execute remote code (RCE).…

The RedTeamPentesting company has introduced a new tool called keycred for managing and auditing KeyCredentialLink in Active Directory (AD) environments. This tool plays a crucial role in security testing of AD systems and identifying vulnerabilities. With keycred, system administrators and…

Cybersecurity specialists have recently discovered an open-source repository on the GitHub platform called “Windows-WiFi-Password-Stealer.” This repository contains a Python script that allows users to extract saved Wi-Fi passwords from the Windows operating system. Although the author claims that this tool…

In the field of cybersecurity, protecting corporate data is of utmost importance. However, even platforms developed by major technology companies can contain vulnerabilities. Critical security flaws discovered in the IBM OpenPages Governance, Risk, and Compliance (GRC) platform have shown that…

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have jointly issued a warning about large-scale attacks carried out by the Ghost ransomware group. This group has targeted organizations across more than 70 countries, spanning…

Mozilla has released Firefox 135.0.1 to protect users from potential Remote Code Execution (RCE) attacks. This update addresses a critical security vulnerability (CVE-2025-1414) that could have compromised systems and exposed user data. This vulnerability is classified as CWE-119 (Memory Corruption)…

A critical security flaw in the Jupiter X Core plugin for WordPress has been identified, potentially exposing over 90,000 websites to Local File Inclusion (LFI) and Remote Code Execution (RCE) attacks. This vulnerability, tracked as CVE-2025-0366, has been assigned a…