WebStor is a tool implemented in Python under the MIT license for quickly enumerating all websites across all of your organization’s networks, storing their responses, and querying for known web technologies and versions,...
Multiple security vulnerabilities in open source status page system Cachet could allow an attacker to execute arbitrary code and steal sensitive data, researchers have warned. click here to read full Article Read more on...
The spoofed email has targeted close to 75,000 email inboxes, slipping past spam and security controls across Office 365, Google Workspace, Exchange, Cisco ESA, and more. click here to read full Article Read more...
REvil leadership did indeed create a backdoor that enabled them to cut off ransom negotiations between victims and the gang’s own affiliates and pocket the entire ransom payment. click here to read full Article...
中文版本(Chinese version) About DongTai IAST DongTai IAST is an open-source passive interactive security testing (IAST) product. It uses dynamic hooks and taint tracking algorithms to achieve universal vulnerability detection and multiples request associated with...
Numerous security vulnerabilities have been identified and fixed in Apache HTTP Server 2.4, including high-impact server-side request forgery (SSRF) and request smuggling bugs. click here to read full Article Read more on Malware updates...
Guardicore security researcher Amit Serper has discovered a severe design bug in MIcrosoft Exchange’s autodiscover – a protocol that lets users easily configure applications such as Microsoft Outlook with just email addresses and passwords....
Recently, Netgear has fixed numerous security vulnerabilities in its smart switches that could allow device… Netgear Patched a Number of Serious Vulnerabilities In Its Smart Switches on Latest Hacking News. click here to read...
Malware specialists have found evidence of how REvil ransomware’s leadership may have hijacked chats with victims of their own affiliates to cut them out of their ransomware payouts. click here to read full Article...
Hackers are upping their game, using an approach some experts call “Deep Sea Phishing,” which is the use of a combination of sophisticated techniques to become more aggressive. click here to read full Article...
A report from Sonatype revealed that supply chain attacks on open-source public repositories have increased up to 650% year-over-year. The security firm has mentioned that the significant increase in supply-chain attacks has been mainly...
Criminals behind the Ryuk ransomware were early exploiters of the Windows MSHTML flaw, actively leveraging the bug in campaigns ahead of a patch released by Microsoft this week. click here to read full Article...
Threat actors impersonated the USDOT in a phishing campaign that used a combination of tactics – including creating new domains that mimic federal sites so as to appear to be legitimate. click here to...
The malware’s primary tactic is to spread by taking advantage of vulnerable systems and weak administrative credentials. Once they’ve been infected, these systems are then used to mine cryptocurrency. click here to read full...
Aamir Lakhani, a researcher at FortiGuard Labs, explains why organizations must extend cyber-awareness training across the entire enterprise, from Luddites to the C-suite. click here to read full Article Read More on latest Security...
‘OMIGOD’ vulnerabilities put Azure customers at risk click here to read full Article Read More on latest Security Updates
