LATEST

ZerOwl — Find Vulnerabilities Before Hackers Do
Google Fined €403 Million Over GDPR Violations in Location Data Tracking

Google Fined €403 Million Over GDPR Violations in Location Data Tracking

CYBER ATTACKZerowl

Ireland's Data Protection Commission (DPC) has levied a €403 million fine on Google for GDPR violations This article explores google gdpr violations.

Citrix NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attacks

Citrix NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attacks

CYBER ATTACKZerowl

Citrix NetScaler administrators are facing reports of two undisclosed remote code execution vulnerabilities allegedly exploited in real-world attacks This.

WordPress Comment2Shell Vulnerability Lets Hackers Take Over Sites Through Comments

WordPress Comment2Shell Vulnerability Lets Hackers Take Over Sites Through Comments

CYBER ATTACKZerowl

WordPress administrators are being advised to patch a high-severity core vulnerability that can transform anonymous comments into server-side command.

TWEAKOS Malware Turns Telegram Into a Stealer, C2 Platform and Stolen Account Marketplace

TWEAKOS Malware Turns Telegram Into a Stealer, C2 Platform and Stolen Account Marketplace

CYBER ATTACKZerowl

Tweakos hijack messaging accounts and turn them into items for sale This article explores telegram stealing. . Researchers recovered two related Python.

Top 10 Best Data Security Companies 2026

Top 10 Best Data Security Companies 2026

CYBER ATTACKZerowl

By 2026, enterprise data environments will no longer be confined to a single centralized location. Sensitive information now resides across a wide array.

Sauron Loader Malware Uses DLL Side-Loading and In-Memory Decryption to Evade Detection

Sauron Loader Malware Uses DLL Side-Loading and In-Memory Decryption to Evade Detection

CYBER ATTACKZerowl

The Sauron Loader has been identified in cyberattacks targeting German organizations, offering intruders an additional means to distribute malware This.

Salesforce Agentforce Flaw Lets Attackers Steal CRM Data With Zero-Click Prompt Injection

Salesforce Agentforce Flaw Lets Attackers Steal CRM Data With Zero-Click Prompt Injection

CYBER ATTACKZerowl

A newly disclosed Salesforce Agentforce vulnerability, dubbed SalesBleed, could have allowed attackers to extract sensitive CRM data through a zero-click.

Researchers Found a Botnet That Uses an AI Agent to Operate Inside Compromised Servers

Researchers Found a Botnet That Uses an AI Agent to Operate Inside Compromised Servers

CYBER ATTACKZerowl

CARBONATO is a botnet that turns Docker servers into footholds for attackers This article explores carbonato botnet. . In just one day, they managed to.

Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'

Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'

A straightforward but potent prompt injection vulnerability exists within the Manus AI platform, potentially allowing for data theft and compromise This.

PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence

PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence

Cybersecurity experts have identified a new variant of the PamStealer malware that introduces a server-side decryption chain to ensure that the main.

Top 5 this week

Page 27 of 316