Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities. Install: cd /optgit clone https://github.com/stark0de/nginxpwnercd nginxpwnerchmod +x install.sh./install.sh Usage: Target tab in Burp, select host, right click, copy all URLs in...
A previously undocumented backdoor malware, dubbed PortDoor, is being used by a probable Chinese advanced persistent threat actor (APT) to target the Russian defense sector, according to researchers. click here to read full Article...
The IoT security team at the Microsoft Security Response Center said vulnerabilities discovered affect at least 25 different products made by more than a dozen organizations, including Amazon, ARM, Google Cloud, Samsung, RedHat, Apache,...
Android mobile phone users across the U.K. are being targeted by text messages containing a particularly nasty piece of spyware called “Flubot,” according to the country’s National Cyber Security Centre. click here to read...
Farming isn’t always safe from cyber threats – at least, that’s what some recently found… Security Vulnerabilities In John Deere API Could Expose Tractor Customers on Latest Hacking News. click here to read full...
Heads up, WhatsApp users! Two separate vulnerabilities in WhatsApp could potentially expose sensitive user data… Two WhatsApp Vulnerabilities Could Allow Stealing Sensitive Data, Hacking Phones on Latest Hacking News. click here to read full...
The DHS’s Cybersecurity and Infrastructure Security Agency (CISA) today issued ICS advisories for vulnerabilities in the Horner Automation Cscape software and the Mitsubishi Electric GOT. click here to read full Article Read more on...
The Prometei variant used in the recent attack was found to provide the attackers with a stealthy and sophisticated backdoor that supported a wide range of tasks, along with harvesting credentials. click here to...
The operators not only lock up files, but also steal data and threaten to leak it if the ransom isn’t paid, in a double-extortion gambit. They also demand multimillion-dollar ransoms. click here to read...
VulnerableCode is a free and open database of FOSS software package vulnerabilities and the tools to create and keep the data current. It is made by the FOSS community to improve and secure the...
A newly discovered critical zero-day authentication bypass vulnerability (CVE-2021-22893) in Pulse Secure VPN devices is found to be currently exploited in the wild. At least two threat actors have been behind a series of...
The patch was part of the Firefox 88 update, Firefox ESR 78.10 browser, and Thunderbird 78.10 email client. In total, Firefox 88 addresses 13 browser bugs, six of which are rated high-severity. click here...
Attacks on supervisory control and data acquisition (SCADA) and other industrial systems that use OpENer may take advantage of several vulnerabilities in the OpENer stack. The OpENer EtherNet/IP (ENIP) stack, maintained by EIPStackGroup and...
Six days after installing the webshell, the actor used the installed webshell to run PowerShell commands to gather information from the local server and the Active Directory and stole credentials from the compromised Exchange...
The BazarLoader downloader, written in C++, has the primary function of downloading and executing additional modules. BazarLoader was first observed in the wild last April – and since then researchers have observed at least...
The NSA, the CISA, and the FBI jointly released a Cybersecurity Advisory, “Russian SVR Targets U.S. and Allied Networks,” today to expose ongoing Russian Foreign Intelligence Service (SVR) exploitation of five publicly known vulnerabilities....
