LATEST

ZerOwl — Find Vulnerabilities Before Hackers Do
Iran‑Linked Actors Forge Deeper Ties With Cybercriminal Networks

Iran‑Linked Actors Forge Deeper Ties With Cybercriminal Networks

CYBER ATTACKZerowl

Discover how Iranian state-sponsored hackers are becoming more involved in the criminal world, making their connections with underground cybercrime groups.

Hackers Leveraging Cloudflare Anti-Bot Features to Steal Microsoft 365 Credentials

Hackers Leveraging Cloudflare Anti-Bot Features to Steal Microsoft 365 Credentials

CYBER ATTACKZerowl

A complex Microsoft 365 credential harvesting campaign that uses Cloudflare's own security features to avoid detection and steal user login information.

GitLab Security Update – Patch for XSS and API DoS Vulnerabilities

GitLab Security Update – Patch for XSS and API DoS Vulnerabilities

CYBER ATTACKZerowl

GitLab Security Update Fixes XSS and API DoS Holes GitLab has put out important security updates for its Community Edition (CE) and Enterprise Edition.

Critical Palo Alto Networks Cortex XDR Broker Vulnerability Allows Attackers to Access and Modify Sensitive Data

Critical Palo Alto Networks Cortex XDR Broker Vulnerability Allows Attackers to Access and Modify Sensitive Data

CYBER ATTACKZerowl

Palo Alto Networks has put out a security advisory to let customers know about a new flaw that affects its Cortex XDR Broker Virtual Machine (VM) This.

ClickFix Social Engineering Delivers MacSync Infostealer On Macs

ClickFix Social Engineering Delivers MacSync Infostealer On Macs

CYBER ATTACKZerowl

The ClickFix social engineering method has become a popular way to spread malware in the last few months, especially among macOS users This article.

Chrome Security Update – Patch for 29 Vulnerabilities that Allow Remote Code Execution

Chrome Security Update – Patch for 29 Vulnerabilities that Allow Remote Code Execution

CYBER ATTACKZerowl

Patch for 29 Chrome security holes Google has officially released Chrome version 146 to the stable channel This article explores patch 29 chrome. . This.

CastleRAT Exploits Deno Runtime To Bypass Enterprise Security

CastleRAT Exploits Deno Runtime To Bypass Enterprise Security

CYBER ATTACKZerowl

ThreatDown Research recently found the first documented use of the Deno JavaScript runtime in a CastleRAT attack, which is a big deal in the world of.

Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit

Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit

Apple released fixes for a security hole in iOS, iPadOS, and macOS Sonoma on Wednesday. This hole was found to be part of the Coruna exploit kit. The.

UNC6426 Turns NPM Supply‑Chain Breach Into Full AWS Admin Access

UNC6426 Turns NPM Supply‑Chain Breach Into Full AWS Admin Access

CYBER ATTACKZerowl

In 2025, Mandiant found out that the threat group UNC6426 had launched a complex attack that used a hacked NPM package to take complete control of a.

Top 5 this week

Page 145 of 278