SAP Security Patch Day May 2024: Critical CVE-2024-33006 Vulnerability...
SAP Security Patch Day May 2024: Critical CVE-2024-33006 Vulnerability Could Lead to System Takeover On May 14, 2024, SAP delivered its monthly security updates, which included 14 new Security Notes a...
Microsoft May 2024 Patch Tuesday Highlights: 61 CVEs, Actively Exploit...
Microsoft May 2024 Patch Tuesday Highlights: 61 CVEs, Actively Exploited Zero-Days (CVE-2024-30051, CVE-2024-30040) [Update] September 10, 2024: “PoC Exploit Available for Windows DWM Core Libra...
Alleged Europol Breach by IntelBroker
Alleged Europol Breach by IntelBroker [May 11, 2024] Europol made an announcement confirming the breach and added details. [May 11, 2024] Europol data is allegedly sold to an unknown buyer. Europol, t...
BogusBazaar Scams 850K Shoppers Through Fraudulent E-Commerce Sites
BogusBazaar Scams 850K Shoppers Through Fraudulent E-Commerce Sites In a recent investigation, researchers exposed an expansive network of fraudulent e-commerce websites that scammed over 850,000 vict...
Major Cyber Attacks in Review: April 2024
Major Cyber Attacks in Review: April 2024 April 2024 witnessed major cyber attacks targeting sectors from government bodies to technology firms, emphasizing the ever-present and escalating threats in...
Veeam Service Provider Console Affected by Severe RCE Vulnerability: C...
Veeam Service Provider Console Affected by Severe RCE Vulnerability: CVE-2024-29212 Veeam has recently disclosed a significant security vulnerability within Veeam Service Provider Console (VSPC), iden...
New High-Severity Vulnerability in Apache ActiveMQ Poses Risk of Unaut...
New High-Severity Vulnerability in Apache ActiveMQ Poses Risk of Unauthorized Access: CVE-2024-32114 A high-severity vulnerability, CVE-2024-32114, has been discovered in Apache ActiveMQ, potentially ...
Latin America Under Threat: The Venom RAT Campaign's Cyber Invasion In...
Latin America Under Threat: The Venom RAT Campaign’s Cyber Invasion Initiative In Latin America, there is a significant cyber threat posed by the Venom RAT campaign, necessitating swift and decisive a...
ShadowRay Campaign Exploits Critical Ray Framework Vulnerabilities to ...
ShadowRay Campaign Exploits Critical Ray Framework Vulnerabilities to Compromise AI Workloads Globally Since September 5, 2023, a sophisticated cyber threat named the ‘ShadowRay’ campaign has targeted...
APT28 Deploys ‘GooseEgg’ in Attacks Exploiting the Windows Print Spool...
APT28 Deploys ‘GooseEgg’ in Attacks Exploiting the Windows Print Spooler Vulnerability, CVE-2022-38028 Microsoft recently shed light on a campaign orchestrated by the Russian-based threat actor Forest...
OpenMetadata Vulnerabilities Allow Attackers to Cryptomine in Kubernet...
OpenMetadata Vulnerabilities Allow Attackers to Cryptomine in Kubernetes Environments Recent findings from a Microsoft security blog reveal that attackers exploit newly discovered critical vulnerabili...
CVE-2024-21006 in Oracle WebLogic Server – Oracle’s April 2024 Update ...
CVE-2024-21006 in Oracle WebLogic Server – Oracle’s April 2024 Update Brings 441 New Security Patches Oracle has released its Critical Patch Update advisory for April 2024, which addresses vulnerabili...
Committing a Sin, OpenJS Foundation and XZ Utils Incidents: Lessons in...
Committing a Sin, OpenJS Foundation and XZ Utils Incidents: Lessons in Open Source Security Recent events have brought to light critical issues related to cybersecurity threats and social engineering ...
Ivanti Avalanche Received an Update for Over Two Dozen Vulnerabilities...
Ivanti Avalanche Received an Update for Over Two Dozen Vulnerabilities (CVE-2024-24996, CVE-2024-29204…) Ivanti has recently issued security updates to address multiple vulnerabilities in Avalanche. T...
Major Cyber Attacks in Review: March 2024
Major Cyber Attacks in Review: March 2024 March 2024 witnessed a wave of cyber attacks targeting prominent organizations globally. From telecommunications giants to government pension funds, several h...
Cyber Reflections of Iran's Attack on Israel
Cyber Reflections of Iran’s Attack on Israel [Update] April 22, 2024: “Israeli Hackers Strike Back: Cyber Av3ngers Hacked” [Update] April 17, 2024: “Ongoing Hacktivist Activities” On Saturday and earl...
Critical PHP Vulnerabilities: Update Now to Prevent Takeovers and Comm...
Critical PHP Vulnerabilities: Update Now to Prevent Takeovers and Command Injection (CVE-2024-1874, CVE-2024-2756, CVE-2024-3096, CVE-2024-2757) The PHP development team recently announced security up...
Critical OS Command Injection Vulnerability in Palo Alto's GlobalProte...
Critical OS Command Injection Vulnerability in Palo Alto’s GlobalProtect Gateway: CVE-2024-3400. The patch is not available yet. [Update] April 17, 2024: “PoC Exploit Available for CVE-2024-3400: Rese...
Microsoft’s April 2024 Patch Tuesday, 149 Vulnerabilities Patched, Inc...
Microsoft’s April 2024 Patch Tuesday, 149 Vulnerabilities Patched, including 2 Zero-Day Vulnerabilities Microsoft’s April 2024 Patch Tuesday was a substantial release addressing a total of 149 securit...
Ivanti Connect Secure and Policy Secure Gateways Vulnerable to DoS and...
Ivanti Connect Secure and Policy Secure Gateways Vulnerable to DoS and Code Execution (CVE-2024-21894) Ivanti recently released patches to fix multiple vulnerabilities found in their popular Connect S...