A study of 16 different Uniform Resource Locator (URL) parsing libraries has unearthed inconsistencies and confusions that could be exploited to bypass validations and open the door to a wide range of attack vectors....
Threat actors are actively weaponizing unpatched servers affected by the newly identified “Log4Shell” vulnerability in Log4j to install cryptocurrency miners, Cobalt Strike, and recruit the devices into a botnet, even as telemetry signs point...
Infection chains associated with the Qakbot malware have been broken down into “distinct building blocks” by Microsoft. It will help to detect and block the threat in an effective manner proactively. click here to...
Exploit code has been released for a serious code-execution vulnerability in Log4j, which is used by large enterprises and also in Java versions of Minecraft, several websites reported last Thursday. click here to read...
New research by New Zealand company Emsisoft has found that a cyber-blackmail tactic first debuted by ransomware gang MAZE has been adopted by over a dozen other criminal cyber-gangs. Click here for image source...
Russian hackers could have piggybacked on a device produced by JetBrains, which is based in the Czech Republic, to achieve access to federal govt and private sector systems in the United States. Graphic and...
Protection vulnerabilities observed in Point-of-sale (PoS) terminals generated by two of the most significant companies of these products in the environment could have allowed cybercriminals to do a whole lot of damage. Graphic and...
