A team of researchers has recently shared insights into TsuNAME vulnerability risking DNS servers. As… TsuNAME Vulnerability Allows DoS Attacks Against DNS Servers on Latest Hacking News. click here to read full Article Read...
Security researchers have found extreme domain name system (DNS) fixes that hackers may use to conduct constructive denial-of-service attacks on authoritative DNS servers. The bug they refer to as TsuNAME has been discovered by...
The maintainers of Exim have released patches to address as many as 21 security vulnerabilities in its software which could allow unauthenticated attackers to attain complete remote code execution and gain root privileges. The...
Collectively named ’21Nails,’ the security flaws include 11 vulnerabilities that require local access to an Exim server and 10 other weaknesses that could be exploited remotely. click here to read full Article Read more...
In recent years, the web has been flooded with news and data breach notifications that have originated after a company misconfigured a cloud-based database, which eventually leaked sensitive data. click here to read full...
Experts pointed out that the attacks begun before the vendor has fixed the issues, meaning that we cannot exclude the possibility that threat actors have compromised organizations using FileZen. click here to read full...
Unpatched Microsoft Exchange servers are being targeted by the Prometei botnet and added to its operators’ army of Monero (XMR) cryptocurrency mining bots. This malware which can infect both Windows and Linux systems was...
?The login names and passwords for 1.3 million current and historically compromised Windows Remote Desktop servers have been leaked by UAS, the largest hacker marketplace for stolen RDP credentials. click here to read full...
A malvertising operation known under the codename of Tag Barnakle has breached more than 120 ad servers over the past year and inserted malicious code into legitimate ads to redirect website visitors. click here...
The vulnerabilities could allow a remote, unauthenticated attacker to execute code on a server running Cockpit in some configurations, specifically limited to those running MongoLite. click here to read full Article Read more on...
FBI removes web shells from infected Exchange servers click here to read full Article Read More on latest Security Updates
Authorities have executed a court-authorized operation to copy and remove malicious web shells from hundreds of vulnerable on-premises versions of Microsoft Exchange Server software in the United States. Through January and February 2021, certain...
The Department of Justice revealed on Tuesday that the FBI gained authorization to remove web shells installed on compromised servers related to the Exchange vulnerabilities. click here to read full Article Read more on...
mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: > git clone https://github.com/stampery/mongoaudit.git > cd mongoaudit > python...
The CISA has ordered federal agencies to scan their networks again for any signs of compromised on-premises Microsoft Exchange servers and report their findings within five days. click here to read full Article Read...
Boomerang is a tool to expose multiple internal servers to web/cloud using HTTP+TCP Tunneling. The Server will expose 2 ports on the Cloud. One will be where tools like proxychains can connect over socks,...
