Overview of CVE-2025-32433
A severe remote code execution vulnerability has been identified in the Erlang/OTP SSH implementation, tracked as CVE-2025-32433. This vulnerability scores a maximum CVSS of 10.0, indicating critical severity.
Attackers are utilizing Windows shortcut (.lnk) files to deceive users into executing malicious code on their systems. Researchers from Trend Micro's Zero Day Initiative (ZDI) have reported that at least 11
Microsoft's March 2025 Patch Tuesday has addressed a total of 57 vulnerabilities, including six critical zero-day flaws that are actively exploited. The vulnerabilities have been categorized with 23 related to remote
Image courtesy of Malware Operation ‘DollyWay’
DollyWay is a long-running malware campaign that has compromised over 20,000 WordPress sites globally. The operation primarily targets WordPress sites, using a sophisticated approach to maintain
PayPal Scam Warning—Dangerous Invoice Bypasses Email Security
Beware of a new PayPal invoice scam that uses old tricks to bypass email security. As Google rolls out AI-powered protections to aid Android users,
