The Phishing Risks of Twitter's Name Change to X
The Phishing Risks of Twitter’s Name Change to X In today’s digital playground, social media swings both ways, offering a fun-filled space for individuals to connect and share, while also ...
Russia-Linked APT Group Gamaredon Starting Extortion 30-50 Minutes Aft...
Russia-Linked APT Group Gamaredon Starting Extortion 30-50 Minutes After First Initial Access The threat group, Gamaredon, linked to Russia, has been observed engaging in data exfiltration activities ...
VMware Responses to the Critical CVE-2023-20891 Vulnerability Exposing...
VMware Responses to the Critical CVE-2023-20891 Vulnerability Exposing CF API Admin Credentials Virtual machines have revolutionized the world of cybersecurity, offering a myriad of benefits to cybers...
RCE Vulnerability in OpenSSH’s SSH-Agent Forwarding: CVE-2023-38408
RCE Vulnerability in OpenSSH’s SSH-Agent Forwarding: CVE-2023-38408 SSH-Agent is a widely used program that holds private keys for public key authentication, providing a secure and convenient way to l...
Critical Zero-Day in Ivanti EPMM (Formerly MobileIron Core) Is Activel...
Critical Zero-Day in Ivanti EPMM (Formerly MobileIron Core) Is Actively Exploited (CVE-2023-35078) Ivanti, a U.S. IT software company, has resolved an actively exploited zero-day authentication bypass...
Critical Vulnerabilities in Atlassian and Apple Products: Apple Zero-D...
Critical Vulnerabilities in Atlassian and Apple Products: Apple Zero-Day Actively Exploited (CVE-2023-38606) Atlassian and Apple have each promptly addressed critical vulnerabilities threatening their...
Zero-Days (CVE-2023-26077, CVE-2023-26078) in Atera Windows Installers
Zero-Days (CVE-2023-26077, CVE-2023-26078) in Atera Windows Installers Recent revelations have exposed critical zero-day vulnerabilities in Atera Windows installers. Cyber attackers could potentially ...
Google Partially Patches Cloud Build’s Critical Design Flaw: Bad.Build...
Google Partially Patches Cloud Build’s Critical Design Flaw: Bad.Build Researchers discovered a critical security design flaw in Google Cloud Build, which they dubbed as “Bad.Build”. The d...
First-Known Targeted Open-Source Supply Chain Attacks Strike the Banki...
First-Known Targeted Open-Source Supply Chain Attacks Strike the Banking Sector The cybersecurity threat landscape continues to witness new and sophisticated threats, and the banking sector is no exce...
Fixed Critical Severity Vulnerabilities (CVE-2022-45788) in Schneider ...
Fixed Critical Severity Vulnerabilities (CVE-2022-45788) in Schneider Electric EcoStruxure Products, Modicon PLCs, and PACs In the realm of industrial control systems (ICS), vulnerabilities pose signi...
An Ongoing DDoS Campaign Targeting Sweden
An Ongoing DDoS Campaign Targeting Sweden Following an Islamophobic incident where the Qur’an was burned in Stockholm, Sweden, a new wave of cyber attacks, named #OpSweden, has emerged with sign...
WormGPT: Blackhat AI Module Surges to 5,000 Subscribers in Just Few Da...
WormGPT: Blackhat AI Module Surges to 5,000 Subscribers in Just Few Days Artificial Intelligence (AI) has brought groundbreaking innovations, and one of its remarkable subsets is generative AI. While ...
High Severity Vulnerabilities Fixed by Chrome 115 Update (CVE-2023-372...
High Severity Vulnerabilities Fixed by Chrome 115 Update (CVE-2023-3727, CVE-2023-3728, CVE-2023-3730, CVE-2023-3732) Google recently announced the release of the latest Chrome update, Chrome 115, to ...
Critical Patches for Oracle Products including MySQL (CVE-2023-20862),...
Critical Patches for Oracle Products including MySQL (CVE-2023-20862), WebLogic Server (CVE-2023-26119) and VirtualBox VM (CVE-2023-22018) with critical vulnerabilities Oracle has recently released 50...
Overview of Cloudflare’s 2023 Q2 DDoS Threat Report
Overview of Cloudflare’s 2023 Q2 DDoS Threat Report Cloudflare, a renowned internet security company, has recently released a comprehensive report concerning DDoS attacks (Distributed Denial-of-Servic...
Critical and High Vulnerabilities in Citrix ADC and Citrix Gateway (CV...
Critical and High Vulnerabilities in Citrix ADC and Citrix Gateway (CVE-2023-3519, CVE-2023-3466, CVE-2023-3467) ...
Critical WooCommerce Vulnerability Enables Admin Privileges on WordPre...
Critical WooCommerce Vulnerability Enables Admin Privileges on WordPress Sites (CVE-2023-28121) Researchers have observed an active exploit campaign targeting a newly disclosed vulnerability, CVE-2023...
Critical Remote Code Execution Vulnerability in Adobe ColdFusion (CVE-...
Critical Remote Code Execution Vulnerability in Adobe ColdFusion (CVE-2023-29300) [Update] January 9, 2024: “CVE-2023-38203 and CVE-2023-29300 in Adobe ColdFusion Have Joined the CISA KEV Catalog” [Up...
Docker Hub Images Expose Secrets and Private Keys, Potentially Leading...
Docker Hub Images Expose Secrets and Private Keys, Potentially Leading to Attacks Researchers at RWTH Aachen University in Germany have conducted a study, revealing that numerous Docker images shared ...
DDoS Alert for NATO Countries
DDoS Alert for NATO Countries The rise in DDoS attacks poses significant challenges to individuals, organizations, and even entire nations. The impending threat from Anonymous Russia against France, ...