An exploration of zero-click attack surface for the popular video conferencing solution Zoom has yielded two previously undisclosed security vulnerabilities that could have been exploited to crash the service, execute malicious code, and even...
Sensitive voter details may have been compromised after a group of hackers was allegedly able to breach the servers of Comelec, stealing over 60GB of data possibly affecting the May 2022 elections. click here...
The security team of the U.K NHS said that it detected an unknown threat actor using the Log4Shell vulnerability to hack VMWare Horizon servers and plant web shells for future attacks. click here to...
A previously unknown rootkit has been found setting its sights on Hewlett-Packard Enterprise’s Integrated Lights-Out (iLO) server management technology to carry out in-the-wild attacks that tamper with the firmware modules and completely wipe data...
An Iranian cybersecurity firm said it discovered a novel rootkit that hides inside the firmware of HP iLO devices and which has been used in real-world attacks to wipe servers of Iranian entities. click...
Cado Security said in a report that the botnet has targeted servers hosted by Alibaba Cloud, Baidu, Tencent, and Huawei Cloud, echoing previous findings from Trend Micro and Qihoo 360 Netlab. click here to...
The infamous Conti ransomware threat actor is using the critical Log4Shell exploit to gain rapid access to internal VMware vCenter Server instances and encrypt virtual machines. click here to read full Article Read more...
Cerber ransomware is active again with new attack tactics. This time it has been observed targeting remote code execution vulnerabilities in Atlassian Confluence and GitLab servers. click here to read full Article Read more...
Microsoft has extended the Secured-core concept to servers, and to Windows Server and Azure Stack HCI to make the hardware less susceptible to firmware attacks and running unverified code. click here to read full...
NginRAT malware is being deployed on eCommerce servers in the U.S., Germany, and France. The malware was spotted on servers that had been infected with CronRAT. The malware makes changes to the core functionality...
Researchers from security firm Sansec recently discovered a new Linux remote access trojan (RAT), tracked as CronRAT, that hides in the Linux task scheduling system (cron) on February 31st. click here to read full...
Numerous multiplayer games are available for Android, iOS, and desktop right now. One of the better ones is Among Us. You can download the game for $5 from Steam. It’s great that the game...
E-commerce platforms in the U.S., Germany, and France have come under attack from a new malware targeting Nginx servers to masquerade its presence and slip past detection by security solutions. click here to read...
Security researchers discovered that attackers are also deploying a Linux backdoor on compromised e-commerce servers after injecting a credit card skimmer into online shops’ websites. click here to read full Article Read more on...
pwnSpoof (from Punk Security) generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for...
Apache, the open-source cross-platform web server software, rolled out patches to fix two security vulnerabilities that were being abused by criminals. While the first flaw can be exploited for RCE, the other moderate flaw...
