Cring ransomware actors are actively exploiting older vulnerabilities in ColdFusion servers and Fortigate VPNs to cripple industrial organizations. The Cring hackers have been linked with hackers in Belarus and Ukraine who used automated tools...
Rapid7 unearthed a malicious campaign targeting Windows 10 running on Chrome browsers. The objective of the campaign is to obtain sensitive data and steal cryptocurrency from the infected systems. Experts recommend avoiding visiting unknown...
Google announced that it will pay researchers to find exploits using vulnerabilities, over the next three months as part of a new bug bounty program to improve the security of the Linux kernel. click...
A now-patched critical RCE vulnerability in GitLab’s web interface is being actively exploited in the wild, rendering a large number of internet-facing GitLab instances susceptible to attacks. click here to read full Article Read...
A now-patched critical remote code execution (RCE) vulnerability in GitLab’s web interface has been detected as actively exploited in the wild, cybersecurity researchers warn, rendering a large number of internet-facing GitLab instances susceptible to...
After Internet Explorer, Magnitude Exploit Kit has been observed infecting Chromium-based browsers running on Windows OS in a series of attacks. It abuses two flaws: the first one is a remote code execution issue...
Cryptocurrency scammers are exploiting Apple’s Enterprise Developer Program to get bogus trading apps onto their marks’ iPhones. Sophos Labs observed the scam making the rounds on dating sites. click here to read full Article...
Qualys researchers reported that several older vulnerabilities, with existing patches, in software made by several Oracle and Adobe are being actively exploited by ransomware groups. click here to read full Article Read more on...
In its notification to customers, Coinbase explains that between March and May 20th, 2021, a threat actor conducted a hacking campaign to breach Coinbase customer accounts and steal cryptocurrency. click here to read full...
The company is coordinating with multiple CERT organizations worldwide to take down the botnet’s infrastructure by shutting down all detected command-and-control (C2) servers. click here to read full Article Read more on Malware updates...
Telegram channels have become quite the hot seat for threat actors. Lately, a new Remote Access Trojan (RAT) has entered the landscape, propagating via Telegram channels. click here to read full Article Read more...
A simple scanner/exploitation tool written in GO which automatically exploits known and existing gadgets (checks for specific variables in the global context) to perform XSS via Prototype Pollution. NOTE: The program only exploits known...
A simple scanner/exploitation tool written in GO which automatically exploits known and existing gadgets (checks for specific variables in the global context) to perform XSS via Prototype Pollution. NOTE: The program only exploits known...
After gaining access to the server, the APT actors moved laterally through the network and created new domain controller, server, and workstation user accounts mimicking already existing ones. click here to read full Article...
Stolen API keys are being increasingly sold on hacker forums. Cyber adversaries are exploiting cryptocurrency exchange API keys and using them to steal cryptocurrencies from victims. click here to read full Article Read More...
A financially motivated threat group, tracked as UNC2447, was spotted exploiting a previously disclosed zero-day flaw in SonicWall’s Secure Mobile Access (SMA) appliances. click here to read full Article Read more on computer hacking...
