OpenSSL Vulnerabilities Allow Remote Attackers to Execute Malicious Code
A significant security advisory addressing multiple vulnerabilities across several versions of its cryptographic library. The update patches ten distinct security flaws, ranging from memory...
AsyncRAT Abuses Cloudflare Free-Tier Services to Conceal Malicious Activity
Cybercriminals deploying AsyncRAT are exploiting Cloudflare's free-tier services and TryCloudflare tunneling domains to host WebDAV servers, effectively masking their malicious operations behind trusted infrastructure.
This...
Malicious Chrome Extension Steals MEXC Wallet Credentials and Automates Trading
A dangerous Chrome extension called MEXC API Automator has been discovered stealing cryptocurrency exchange credentials from unsuspecting users.
Socket's Threat Research Team identified this malicious...
Over 2.5 Million Malicious Requests Target Adobe ColdFusion Servers
A coordinated exploitation campaign targeting Adobe ColdFusion servers unfolded during the Christmas 2025 holiday period, with threat actors launching more than 2.5 million malicious...
NVIDIA Merlin Flaw Allows Malicious Code Execution and DoS Attacks
NVIDIA has released urgent security patches addressing two critical deserialization vulnerabilities in its Merlin machine learning framework, a widely adopted open-source platform for building...