Threat actors have been brute-forcing VPN credentials and bypassing multi-factor authentication on SonicWall Gen6 SSL-VPN appliances by exploiting CVE-2024-12802, with [...]

A threat actor using the account deadcode09284814 has published four malicious npm packages containing the leaked Shai-Hulud malware, which steals [...]

A researcher known as Chaotic Eclipse has released a proof-of-concept exploit for a Windows privilege escalation zero-day called MiniPlasma, which [...]

A security researcher using the handle Chaotic Eclipse has published proof-of-concept exploits for two unpatched Windows vulnerabilities named YellowKey and [...]