LATEST

ZerOwl — Find Vulnerabilities Before Hackers Do
Fake GitHub Repos Push BoryptGrab Stealer To Harvest Browser and Wallet Data

Fake GitHub Repos Push BoryptGrab Stealer To Harvest Browser and Wallet Data

CYBER ATTACKZerowl

Researchers have discovered a new malware campaign that propagates the stealer BoryptGrab by using phony GitHub repositories This article explores malware.

Fake CleanMyMac Website Pushes SHub Stealer To Drain Crypto Wallet Data

Fake CleanMyMac Website Pushes SHub Stealer To Drain Crypto Wallet Data

CYBER ATTACKZerowl

A phony CleanMyMac website is being used by a new macOS malware campaign to trick users into infecting their own computers This article explores.

Critical Pingora Vulnerabilities Expose Cloudflare to Request Smuggling and Cache Poisoning Attacks

Critical Pingora Vulnerabilities Expose Cloudflare to Request Smuggling and Cache Poisoning Attacks

CYBER ATTACKZerowl

Cloudflare has fixed several Pingora vulnerabilities that could allow attackers to smuggle HTTP requests through poison caches and edge proxies, creating.

Cloudflare Pingora Vulnerabilities Allows Request Smuggling & Cache Poisoning Attacks

Cloudflare Pingora Vulnerabilities Allows Request Smuggling & Cache Poisoning Attacks

CYBER ATTACKZerowl

Vulnerabilities in Cloudflare Pingora In order to address three serious vulnerabilities, Cloudflare has released version 0.8.0 of its open-source Pingora.

CISA Warns of Ivanti Endpoint Manager Authentication Bypass Vulnerability Exploited in Attacks

CISA Warns of Ivanti Endpoint Manager Authentication Bypass Vulnerability Exploited in Attacks

CYBER ATTACKZerowl

Following its addition to the Known Exploited Vulnerabilities (KEV) catalog by the Cybersecurity and Infrastructure Security Agency (CISA) on March 9.

CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited

CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited

Based on evidence of active exploitation, the U.S This article explores vulnerability solarwinds web. . Cybersecurity and Infrastructure Security Agency.

Chinese APT Campaign Targets Qatar With PlugX Lures Tied to Middle East Conflict

Chinese APT Campaign Targets Qatar With PlugX Lures Tied to Middle East Conflict

CYBER ATTACKZerowl

Discover how One day after fresh hostilities broke out in the Middle East on March 1, 2026, Camaro Dragon, an advanced persistent threat group with ties.

'BlackSanta' EDR Killer Targets HR Workflows

'BlackSanta' EDR Killer Targets HR Workflows

DATA BREACHZerowl

Threat actors who speak Russian are targeting HR workflows with an attack campaign that uses steganographic image files to hide a malicious tool that can.

APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military

APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military

Two implants known as BEARDSHELL and COVENANT have been seen to be used by the Russian state-sponsored hacking group known as APT28 to enable long-term.

Top 5 this week

Page 194 of 321