Category: Security Hardening

A vulnerability was found in libMirage 3.2.2. It has been classified as problematic. Affected is an unknown function of the file filters/filter-cso/filter-stream.c of the component CSO Filter. The manipulation leads [...]

CVE-2019-15538 | Linux Kernel up to 5.2.9 XFS File System fs/xfs/xfs_iops.c xfs_setattr_nonsize resource management (K32592426)

1 December 2023

A vulnerability was found in Linux Kernel up to 5.2.9 and classified as problematic. This issue affects the function xfs_setattr_nonsize of the file fs/xfs/xfs_iops.c of the component XFS File System. [...]

CVE-2019-8447 | JIRA up to 8.3.1 ServiceExecutor cross-site request forgery

1 December 2023

A vulnerability has been found in JIRA up to 8.3.1 and classified as problematic. This vulnerability affects unknown code of the component ServiceExecutor. The manipulation leads to cross-site request forgery. [...]

CVE-2019-8446 | JIRA up to 8.3.1 issueTable Username improper authorization

1 December 2023

A vulnerability, which was classified as problematic, was found in JIRA up to 8.3.1. This affects an unknown part of the file /rest/issueNav/1/issueTable. The manipulation leads to improper authorization (Username). [...]

CVE-2019-8445 | JIRA up to 7.13.6/8.3.1 Worklog permission

1 December 2023

A vulnerability, which was classified as problematic, has been found in JIRA up to 7.13.6/8.3.1. Affected by this issue is some unknown functionality of the component Worklog. The manipulation leads [...]

CVE-2019-8444 | JIRA up to 7.13.5/8.2.2/8.3.1 wikirenderer Attribute cross site scripting

1 December 2023

A vulnerability classified as problematic was found in JIRA up to 7.13.5/8.2.2/8.3.1. Affected by this vulnerability is an unknown functionality of the component wikirenderer. The manipulation as part of Attribute [...]

CVE-2023-6438 | Thecosy IceCMS 2.0.1 Like /WebArticle/articles/ improper enforcement of a single, unique action

1 December 2023

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to [...]

CVE-2019-1581 | Palo Alto PAN-OS up to 7.1.24/8.0.19/8.1.9/9.0.3 Message input validation

1 December 2023

A vulnerability classified as critical has been found in Palo Alto PAN-OS up to 7.1.24/8.0.19/8.1.9/9.0.3. This affects an unknown part. The manipulation as part of Message leads to improper input [...]

CVE-2019-15537 | proxystatistics Module up to 3.0.x on SimpleSAMLphp DatabaseCommand.php sql injection

1 December 2023

A vulnerability was found in proxystatistics Module up to 3.0.x on SimpleSAMLphp. It has been declared as critical. Affected by this vulnerability is an unknown functionality in the library lib/Auth/Process/DatabaseCommand.php. [...]

CVE-2019-15536 | Acclaim Block Plugin on Moodle delete_records sql injection

1 December 2023

A vulnerability was found in Acclaim Block Plugin on Moodle. It has been classified as critical. Affected is the function delete_records. The manipulation leads to sql injection. This vulnerability is [...]

CVE-2019-15535 | Tasking Manager up to 3.3.x sql injection (Issue 1731)

1 December 2023

A vulnerability was found in Tasking Manager up to 3.3.x and classified as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The identification of this [...]

CVE-2019-15531 | GNU Libextractor up to 1.9 plugins/dvi_extractor.c EXTRACTOR_dvi_extract_method out-of-bounds (DLA 1904-1)

1 December 2023

A vulnerability has been found in GNU Libextractor up to 1.9 and classified as critical. This vulnerability affects the function EXTRACTOR_dvi_extract_method of the file plugins/dvi_extractor.c. The manipulation leads to out-of-bounds [...]

CVE-2019-15530 | D-Link DIR-823G V1.0.2B05 HNAP1 LoginPassword command injection

1 December 2023

A vulnerability, which was classified as critical, was found in D-Link DIR-823G V1.0.2B05. This affects an unknown part of the component HNAP1. The manipulation of the argument LoginPassword as part [...]

CVE-2019-15529 | D-Link DIR-823G V1.0.2B05 HNAP1 Username command injection

1 December 2023

A vulnerability, which was classified as critical, has been found in D-Link DIR-823G V1.0.2B05. Affected by this issue is some unknown functionality of the component HNAP1. The manipulation of the [...]

CVE-2019-15528 | D-Link DIR-823G V1.0.2B05 HNAP1 SetStaticRouteSettings Interface command injection

1 December 2023

A vulnerability classified as critical was found in D-Link DIR-823G V1.0.2B05. Affected by this vulnerability is the function SetStaticRouteSettings of the component HNAP1. The manipulation of the argument Interface as [...]

CVE-2019-15527 | D-Link DIR-823G V1.0.2B05 HNAP1 SetWanSettings MaxIdTime command injection

1 December 2023

A vulnerability classified as critical has been found in D-Link DIR-823G V1.0.2B05. Affected is the function SetWanSettings of the component HNAP1. The manipulation of the argument MaxIdTime as part of [...]

CVE-2019-15526 | D-Link DIR-823G V1.0.2B05 HNAP1 Type command injection

1 December 2023

A vulnerability was found in D-Link DIR-823G V1.0.2B05. It has been rated as critical. This issue affects some unknown processing of the component HNAP1. The manipulation of the argument Type [...]

CVE-2019-15520 | comelz Quark path traversal

1 December 2023

A vulnerability was found in comelz Quark. It has been classified as critical. This affects an unknown part. The manipulation leads to path traversal. This vulnerability is uniquely identified as [...]

CVE-2019-15519 | Power-Response Plugin path traversal

1 December 2023

A vulnerability was found in Power-Response and classified as critical. Affected by this issue is some unknown functionality of the component Plugin Handler. The manipulation leads to path traversal. This [...]

CVE-2019-15518 | Swoole up to 4.2.12 swPort_http_static_handler path traversal

1 December 2023

A vulnerability has been found in Swoole up to 4.2.12 and classified as critical. Affected by this vulnerability is the function swPort_http_static_handler. The manipulation leads to path traversal. This vulnerability [...]

CVE-2019-15517 | jc21 Nginx Proxy Manager up to 2.0.12 path traversal

1 December 2023

A vulnerability, which was classified as critical, was found in jc21 Nginx Proxy Manager up to 2.0.12. Affected is an unknown function. The manipulation with the input %2e%2e%2f leads to [...]

CVE-2019-15516 | Cuberite WebAdmin path traversal

1 December 2023

A vulnerability, which was classified as critical, has been found in Cuberite. This issue affects some unknown processing of the component WebAdmin. The manipulation with the input ….// leads to [...]

CVE-2019-15514 | Telegram App 5.10 on Android/iOS Privacy information disclosure

1 December 2023

A vulnerability classified as problematic was found in Telegram App 5.10 on Android/iOS. This vulnerability affects unknown code of the component Privacy. The manipulation leads to information disclosure. This vulnerability [...]

CVE-2019-15494 | openITCOCKPIT up to 3.7.0 server-side request forgery

1 December 2023

A vulnerability classified as critical has been found in openITCOCKPIT up to 3.7.0. This affects an unknown part. The manipulation leads to server-side request forgery. This vulnerability is uniquely identified [...]

CVE-2019-15493 | openITCOCKPIT up to 3.7.0 access control

1 December 2023

A vulnerability was found in openITCOCKPIT up to 3.7.0. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to improper access controls. [...]

VU#347067: Multiple BGP implementations are vulnerable to improperly formatted BGP updates

12 September 2023

Overview Multiple BGP implementations have been identified as vulnerable to specially crafted Path Attributes of a BGP UPDATE. Instead of ignoring invalid updates they reset the underlying TCP connection for [...]

VU#304455: Authentication Bypass in Tenda N300 Wireless N VDSL2 Modem Router

6 September 2023

Overview An authentication bypass vulnerability exists in the N300 Wireless N VDSL2 Modem Router manufactured by Tenda. This vulnerability allows a remote, unauthenticated user to access sensitive information. Description CVE-2023-4498 [...]

VU#757109: Groupnotes Inc. Videostream Mac client allows for privilege escalation to root account

28 August 2023

Overview Groupnotes Inc. Videostream Mac client installs a LaunchDaemon that runs with root privileges. The daemon is vulnerable to a race condition that allows for arbitrary file writes. A low [...]

VU#287122: Parsec Remote Desktop App is prone to a local elevation of privilege due to a logical flaw in its code integrity verification process

16 August 2023

Overview Parsec updater for Windows was prone to a local privilege escalation vulnerability, this vulnerability allowed a local user with Parsec access to gain NT_AUTHORITY/SYSTEM privileges. Description The vulnerability is [...]

VU#127587: Python Parsing Error Enabling Bypass CVE-2023-24329

11 August 2023

Overview urllib.parse is a very basic and widely used basic URL parsing function in various applications. Description An issue in the urllib.parse component of Python before v3.11 allows attackers to [...]

VU#947701: Freewill Solutions IFIS new trading web application vulnerable to unauthenticated remote code execution

7 August 2023

Overview Freewill Solutions IFIS new trading web application version 20.01.01.04 is vulnerable to unauthenticated remote code execution. Successful exploitation of this vulnerability allows an attacker to run arbitrary shell commands [...]

VU#813349: Software driver for D-Link Wi-Fi USB Adapter vulnerable to service path privilege escalation

27 July 2023

Overview The software driver for D-Link DWA-117 AC600 MU-MIMO Wi-Fi USB Adapter contains a unquoted service path privilege escalation vulnerability. In certain conditions, this flaw can lead to a local [...]

VU#653767: Perimeter81 macOS Application Multiple Vulnerabilities

20 July 2023

Overview A command injection vulnerability can be used in the Perimeter81 macOS application to run arbitrary commands with administrative privileges. Description At the time, the latest Perimeter81 MacOS application (10.0.0.19) [...]

VU#913565: Hard-coded credentials in Technicolor TG670 DSL gateway router

11 July 2023

Overview The Technicolor TG670 DSL Gateway Router includes a hard-coded service account that allows for authentication over services on the WAN interface, using HTTP, SSH, or TELNET. The authenticated user [...]

VU#782720: TCG TPM2.0 implementations vulnerable to memory corruption

28 February 2023

Overview Two buffer overflow vulnerabilities were discovered in the Trusted Platform Module (TPM) 2.0 reference library specification, currently at Level 00, Revision 01.59 November 2019. An attacker who has access [...]

VU#572615: Vulnerabilities in TP-Link routers, WR710N-V1-151022 and Archer C5 V2

17 January 2023

Overview TP-Link router WR710N-V1-151022 running firmware published 2015-10-22 and Archer-C5-V2-160201 running firmware published 2016-02-01 are susceptible to two vulnerabilities: A buffer overflow during HTTP Basic Authentication allowing a remote attacker [...]

VU#986018: New Netcomm router models NF20MESH, NF20, and NL1902 vulnerabilities

17 January 2023

Overview Netcomm router models NF20MESH, NF20, and NL1902 running software versions earlier than R6B035 contain two vulnerabilities. The first is an authentication bypass vulnerability that allows an unauthenticated user to [...]

VU#709991: Netatalk contains multiple error and memory management vulnerabilities

16 November 2022

Overview There are six new vulnerabilities in the latest release of Netatalk (3.1.12) that could allow for Remote Code Execution as well as Out-of-bounds Read. Description Below are the new [...]

VU#434994: Multiple race conditions due to TOCTOU flaws in various UEFI Implementations

8 November 2022

Overview Multiple Unified Extensible Firmware Interface (UEFI) implementations are vulnerable to code execution in System Management Mode (SMM) by an attacker who gains administrative privileges on the local machine. An [...]

VU#794340: OpenSSL 3.0.0 to 3.0.6 decodes some punycode email addresses in X.509 certificates improperly

1 November 2022

Overview Two buffer overflow vulnerabilities were discovered in OpenSSL versions 3.0.0 through 3.0.6. These vulnerabilities were introduced in version 3.0.0 with the inclusion of support for punycode email address parsing [...]

ISC Stormcast For Friday, December 1st, 2023 https://isc.sans.edu/podcastdetail/8760, (Fri, Dec 1st)

1 December 2023

Apple Patches Exploited WebKit Vulnerabilitiues in iOS/iPadOS/macOS, (Thu, Nov 30th)

30 November 2023

Apple today released patches for two WebKit vulnerabilities affecting macOS, iPadOS and iOS. I would expect standalone Safari updates for older macOS versions in the future. At this point, only [...]

Prophetic Post by Intern on CVE-2023-1389 Foreshadows Mirai Botnet Expansion Today, (Thu, Nov 30th)

30 November 2023

Last week, Jonah Latimer posted here about traffic he saw to his own EC2 web honeypot exploiting %%cve:2023-1389%%. I found this looking at new URL strings to our honepot network, [...]

ISC Stormcast For Thursday, November 30th, 2023 https://isc.sans.edu/podcastdetail/8758, (Thu, Nov 30th)

30 November 2023

Decoding the Patterns: Analyzing DShield Honeypot Activity [Guest Diary], (Mon, Nov 27th)

29 November 2023

[This is a Guest Diary by Alex Rodriguez, an ISC intern as part of the SANS.edu BACS program] [...]

ISC Stormcast For Wednesday, November 29th, 2023 https://isc.sans.edu/podcastdetail/8756, (Wed, Nov 29th)

29 November 2023

Pro Russian Attackers Scanning for Sharepoint Servers to Exploit CVE-2023-29357, (Tue, Nov 28th)

28 November 2023

ISC Stormcast For Tuesday, November 28th, 2023 https://isc.sans.edu/podcastdetail/8754, (Tue, Nov 28th)

28 November 2023

Scans for ownCloud Vulnerability (CVE-2023-49103), (Mon, Nov 27th)

27 November 2023

Last week, ownCloud released an advisory disclosing a new vulnerability, CVE-2023-49103 [1]. The vulnerability will allow attackers to gain access to admin passwords. To exploit the vulnerability, the attacker will [...]

ISC Stormcast For Monday, November 27th, 2023 https://isc.sans.edu/podcastdetail/8752, (Mon, Nov 27th)

27 November 2023

SEC Consult SA-20231123 :: Uninstall Key Caching in Fortra Digital Guardian Agent Uninstaller

27 November 2023

Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Nov 27SEC Consult Vulnerability Lab Security Advisory < 20231123-0 > ======================================================================= title: Uninstall Key Caching product: Fortra Digital Guardian Agent [...]

SEC Consult SA-20231122 :: Multiple Vulnerabilities in m-privacy TightGate-Pro

27 November 2023

Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Nov 27SEC Consult Vulnerability Lab Security Advisory < 20231122-0 > ======================================================================= title: Multiple Vulnerabilities product: m-privacy TightGate-Pro vulnerable version: Rolling [...]

Senec Inverters Home V1, V2, V3 Home & Hybrid Use of Hard-coded Credentials - CVE-2023-39169

27 November 2023

Posted by Phos4Me via Fulldisclosure on Nov 27Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/ [...]

[SYSS-2023-019] SmartNode SN200 - Unauthenticated OS Command Injection

27 November 2023

Posted by Maurizio Ruchay via Fulldisclosure on Nov 27Advisory ID: SYSS-2023-019 Product: SmartNode SN200 Analog Telephone Adapter (ATA) & VoIP Gateway Manufacturer: Patton LLC Affected Version(s): [...]

CVE-2023-46307

27 November 2023

Posted by Kevin on Nov 27running on the remote port specified during setup [...]

CVE-2023-46307

27 November 2023

Posted by Kevin on Nov 27While conducting a penetration test for a client, they were running an application called etc-browser which is a public GitHub project with a Docker container. [...]

Survey on usage of security advisories

27 November 2023

Posted by Aurich, Janik on Nov 27Dear list members, we are looking for voluntary participants for our survey, which was developed in the context of a master thesis at the [...]

[CVE-2023-46386, CVE-2023-46387, CVE-2023-46388, CVE-2023-46389] Multiple vulnerabilities in Loytec products (3)

27 November 2023

Posted by Chizuru Toyama on Nov 27[+] CVE : CVE-2023-46386, CVE-2023-46387, CVE-2023-46388, CVE-2023-46389 [+] Title : Multiple vulnerabilities in Loytec L-INX Automation Servers [+] Vendor : LOYTEC electronics GmbH [+] [...]

[CVE-2023-46383, CVE-2023-46384, CVE-2023-46385] Multiple vulnerabilities in Loytec products (2)

27 November 2023

Posted by Chizuru Toyama on Nov 27[+] CVE : CVE-2023-46383, CVE-2023-46384, CVE-2023-46385 [+] Title : Multiple vulnerabilities in Loytec LINX Configurator [+] Vendor : LOYTEC electronics GmbH [+] Affected Product(s) [...]

Senec Inverters Home V1, V2, V3 Home & Hybrid Exposure of the Username to an Unauthorized Actor - CVE-2023-39168

12 November 2023

Posted by Phos4Me via Fulldisclosure on Nov 12Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/ [...]

Senec Inverters Home V1, V2, V3 Home & Hybrid Cleartext Transmission of Authentication Credentials - CVE-2023-39172

12 November 2023

Senec Inverters Home V1, V2, V3 Home & Hybrid Publicly Accessible Default Credentials- CVE-2023-39170

12 November 2023

Senec Inverters Home V1, V2, V3 Home & Hybrid Publicly Accessible Management Interface “Local GUI”- CVE-2023-39171

12 November 2023

HNS-2023-03 - HN Security Advisory - Multiple vulnerabilities in Zephyr RTOS

12 November 2023

Posted by Marco Ivaldi on Nov 12Hi all, Find attached a security advisory that details multiple vulnerabilities we discovered in the Zephyr real-time operating system. * Title: Multiple vulnerabilities in [...]

[CVE-2023-46380, CVE-2023-46381, CVE-2023-46382] Multiple vulnerabilities in Loytec products

3 November 2023

Posted by Chizuru Toyama on Nov 03[+] CVE : CVE-2023-46380, CVE-2023-46381, CVE-2023-46382 [+] Title : Multiple vulnerabilities in Loytec LWEB-802, L-INX Automation Servers, L-IOB I/O Controllers, L-VIS Touch Panels [+] [...]

israel YCMS 4 - Remote File Upload - CSRF / Shell Upload

29 November 2023

Topic: israel YCMS 4 - Remote File Upload - CSRF / Shell Upload Risk: Low Text:[-] Title : israel YCMS 4 - Remote File Upload - CSRF / Shell Upload [...]

Tenda D151 2 - Authentication Bypass

29 November 2023

Topic: Tenda D151 2 - Authentication Bypass Risk: Medium Text:[-] Title : Tenda D151 2 - Authentication Bypass [-] Author : 1933 (TURK TM - SS CYBER) [-] Vendor : [...]

inTouch-1.0 File Upload - RCE

29 November 2023

Topic: inTouch-1.0 File Upload - RCE Risk: High Text:## Title: inTouch-1.0 File Upload - RCE ## Author: nu11secur1ty ## Date: 11/28/2023 ## Vendor: https://codecanyon.net/user/m [...]

osCommerce 4 - Reflected XSS

27 November 2023

Topic: osCommerce 4 - Reflected XSS Risk: Medium Text:# Exploit Title: osCommerce 4 - Reflected XSS # Exploit Author: CraCkEr # Date: 13/11/2023 # Vendor: osCommerce ltd. # Vend [...]

Next-Hour-5.6 - File Upload - RCE

25 November 2023

Topic: Next-Hour-5.6 - File Upload - RCE Risk: High Text:## Title: Next-Hour-5.6 - File Upload - RCE ## Author: nu11secur1ty ## Date: 11/25/2023 ## Vendor: https://codecanyon.net/us [...]

Magento 2.4.6 XSLT Server Side Injection / Command Execution

23 November 2023

Topic: Magento 2.4.6 XSLT Server Side Injection / Command Execution Risk: Medium Text:Exploit Title: Magento ver. 2.4.6 - XSLT Server Side Injection # Date: 2023-11-17 # Exploit Author: tmrswrr # [...]

ActiveMQ-5.18.2 RCE-shell-reverse-Metasploit

23 November 2023

Topic: ActiveMQ-5.18.2 RCE-shell-reverse-Metasploit Risk: High Text:Automated exploit author: nu11secur1ty Module: https://github.com/rapid7/metasploit-framework Date 11/16/2023 More about: [...]

ActiveMQ 5.18.2 RCE shell-upload

23 November 2023

Topic: ActiveMQ 5.18.2 RCE shell-upload Risk: High Text:## Title: ActiveMQ 5.18.2 RCE shell-upload ## Author: nu11secur1ty ## Date: 11/16/2023 ## Vendor: https://activemq.apache.or [...]

ActiveMQ-5.18.2 RCE-shell-reverse-Metasploit

23 November 2023

Topic: ActiveMQ-5.18.2 RCE-shell-reverse-Metasploit Risk: Medium Text:# EDIT: sorry ## Title: ActiveMQ 5.18.2 RCE shell-upload ## Author: nu11secur1ty ## Date: 11/16/2023 ## Vendor: https: [...]

PHPJabbers Availability Booking Calendar 5.0 CSV Injection

22 November 2023

Topic: PHPJabbers Availability Booking Calendar 5.0 CSV Injection Risk: Low Text:# Exploit Title: PHPJabbers Availability Booking Calendar v5.0 - CSV Injection # Date: 12/11/2023 # Exploit Author: BugsBD S [...]

emart-Laravel-Multi-Vendor-eCommerce-Advanced-CMS-V 5.0 (RELEASE 3.9.0) File Upload-RCE

22 November 2023

Topic: emart-Laravel-Multi-Vendor-eCommerce-Advanced-CMS-V 5.0 (RELEASE 3.9.0) File Upload-RCE Risk: Medium Text:NOTE: If you need, I will send you a demo video, please use this mail: nu11secur1typentest@gmail.com! If don't care about thi [...]

WordPress UserPro 5.1.x Password Reset / Authentication Bypass / Escalation

22 November 2023

Topic: WordPress UserPro 5.1.x Password Reset / Authentication Bypass / Escalation Risk: Medium Text:Vulnerability Details & Technical Analysis Password Reset to Privilege Escalation using the Sensitive Information Disclosure [...]

EnBw SENEC Legacy Storage Box Log Disclosure

20 November 2023

Topic: EnBw SENEC Legacy Storage Box Log Disclosure Risk: Low Text:Advisory ID: Ph0s-2023-001 Product: EnBw - SENEC legacy storage box: V1-V3 Manufacturer: SENEC - a part of EnBw Affected Ver [...]

Click Stocks-1.3 - File Upload - RCE

20 November 2023

Topic: Click Stocks-1.3 - File Upload - RCE Risk: High Text:## Title: Click Stocks-1.3 - File Upload - RCE ## Author: nu11secur1ty ## Date: 11/19/2023 ## Vendor: https://codecanyon.net [...]

GaatiTrack Courier Management System 1.0 Cross Site Scripting

20 November 2023

Topic: GaatiTrack Courier Management System 1.0 Cross Site Scripting Risk: Low Text:# Exploit Title: GaatiTrack Courier Management System v1.0 - Multiple Cross-site scripting # Date: 12/112023 # Exploit Autho [...]

Jorani Leave Management System 1.0.2 Host Header Injection

20 November 2023

Topic: Jorani Leave Management System 1.0.2 Host Header Injection Risk: Medium Text:# Exploit Title: Jorani Leave Management System v1.0.2 Host Header Attack # Date: 12/11/2023 # Exploit Author: BugsBD Securit [...]

FireBear Improved Import And Export 3.8.6 XSLT Server Side Injection

20 November 2023

Topic: FireBear Improved Import And Export 3.8.6 XSLT Server Side Injection Risk: Medium Text:Exploit Title: FireBear Improved Import & Export ver. 3.8.6 for Magento 2.4.6 - XSLT Server Side Injection [...]

Shuttle Booking Software 2.0 Cross Site Scripting

20 November 2023

Topic: Shuttle Booking Software 2.0 Cross Site Scripting Risk: Low Text:# Exploit Title: Shuttle Booking Software v2.0 - Multiple Stored Cross-Site Scripting (Authenticated) # Date: 09/11/2023 # E [...]

Chillipages Technologies - Blind Sql Injection

16 November 2023

Topic: Chillipages Technologies - Blind Sql Injection Risk: Medium Text:********************************************************* #Exploit Title: Chillipages Technologies - Blind Sql Injection #Dat [...]

PENGLEAD-2.0 Multiple-SQLi

12 November 2023

Topic: PENGLEAD-2.0 Multiple-SQLi Risk: Medium Text:## Title: PENGLEAD-2.0 Multiple-SQLi ## Author: nu11secur1ty ## Date: 11/11/2023 ## Vendor: https://www.mayurik.com/ ## Sof [...]

travel-1.0-by-oretnom23 Multiple-SQLi

12 November 2023

Topic: travel-1.0-by-oretnom23 Multiple-SQLi Risk: Medium Text:## Title: travel-1.0-by-oretnom23 Multiple-SQLi ## Author: nu11secur1ty ## Date: 11/12/2023 ## Vendor: https://github.com/or [...]

Plesk Obsidian 18.0.56 command injecrion

12 November 2023

Topic: Plesk Obsidian 18.0.56 command injecrion Risk: Medium Text:##Title :Plesk Obsidian 18.0.56 ## Author : Hamza Anonime ## Date: 2023/11/12 Dork : intitle:"Plesk Obsidian 18.0.56" [...]

penglead-2.0 SQLi-Bypass Authentication

10 November 2023

Topic: penglead-2.0 SQLi-Bypass Authentication Risk: Medium Text:## Title: penglead-2.0 SQLi-Bypass Authentication ## Author: nu11secur1ty ## Date: 11/10/2023 ## Vendor: https://www.mayurik [...]

Virtual Pages - Sql Injection

8 November 2023

Topic: Virtual Pages - Sql Injection Risk: Medium Text:********************************************************* #Exploit Title: Virtual Pages - Sql Injection #Date: 2023-11-06 #E [...]

Webnink - sql injection Vulnerability

8 November 2023

Topic: Webnink - sql injection Vulnerability Risk: Low Text:Document Title: Webnink - sql injection Vulnerability Release Date: = 2023-11-07 nabegheh Laboratory ID [...]

1.587

1 December 2023

Newly Added (4)Nodejs CVE-2023-30581 Policy Bypass VulnerabilityTenable Nessus CVE-2023-6062 Denial of Service VulnerabilityTenable Nessus CVE-2023-6178 Denial of Service VulnerabilityJT2Go CVE-2021-38405 Memory Corruption Vulnerability [...]

1.586

30 November 2023

Newly Added (1)Security Vulnerabilities fixed in Google Chrome 119.0.6045.199Modified (42)Arbitrary code execution through unsanitized browser UISecurity patch #77143 available for PHPSecurity patch #77153 available for PHPSecurity patch #77369 available for [...]

1.585

29 November 2023

Newly Added (4)Security Vulnerabilities fixed in Splunk 2023-11-16Security Vulnerabilities fixed in Microsoft Edge 119.0.2151.72Security Vulnerabilities fixed in Adobe Premiere Pro APSB23-65Security Vulnerabilities fixed in Adobe Audition APSB23-64 [...]

1.584

24 November 2023

Newly Added (19)Security update available for Adobe After Effects CVE-2023-47073Security update available for Adobe After Effects CVE-2023-47067Security update available for Adobe After Effects CVE-2023-47072Security update available for Adobe After Effects [...]

1.583

23 November 2023

Newly Added (3)Security Vulnerabilities fixed in Thunderbird 115.5.0Security Vulnerabilities fixed in Firefox ESR 115.5Security Vulnerabilities fixed in Firefox 120 [...]

1.582

22 November 2023

Newly Added (10)FortiClient CVE-2022-40681 Authorization Bypass VulnerabilityFortiClient CVE-2023-41840 DLL Hijacking VulnerabilityFortiClient CVE-2023-33304 Authentication Bypass VulnerabilityPaperCut NG/MF CVE-2023-6006 Privilege Escalation VulnerabilityGolang CVE-2023-45283 Path Traversal VulnerabilityGolang CVE-2023-45284 Input Validation Bypass VulnerabilitySecurity update [...]

1.581

21 November 2023

Newly Added (1)Check Point Endpoint Security CVE-2023-28134 Privilege Escalation VulnerabilityModified (1)Security Vulnerabilities fixed in Siemens COMOS SSA-137900 [...]

1.580

18 November 2023

Newly Added (4)Netskope Client CVE-2023-4996 Privilege Escalation VulnerabilityAVG Anti-Virus CVE-2023-5760 Race Condition VulnerabilityMicrosoft Edge CVE-2023-36027 Privilege Escalation VulnerabilitySecurity Vulnerabilities fixed in Siemens COMOS SSA-137900 [...]

1.579

17 November 2023

Newly Added (3)Microsoft Edge CVE-2023-36409 Information Disclosure VulnerabilityMicrosoft Edge CVE-2023-36014 Remote Code Execution VulnerabilityMicrosoft Edge CVE-2023-36024 Privilege Escalation Vulnerability [...]

1.578

16 November 2023

Newly Added (6)ASP.NET Core CVE-2023-36038 Denial of Service VulnerabilitySecurity update available for Adobe Acrobat APSB23-54Security Vulnerabilities fixed in VideoLAN VideoLAN-SB-VLC-3020Security Vulnerabilities fixed in VideoLAN VideoLAN-SB-VLC-3019Security Vulnerabilities fixed in Google Chrome [...]

CVE-2022-36123 – A vulnerability in Linux kernel mainline v5.18-rc1 through v5.19-rc6 does not clear statically allocated variables in the block starting symbol (.bss) due to a failed early_xen_iret_patch leading to an asm_exc_page_fault, or arbitrary code execution

29 July 2022

Title A vulnerability in Linux kernel mainline v5.18-rc1 through v5.19-rc6 does not clear statically allocated variables in the block starting symbol (.bss) due to a failed early_xen_iret_patch leading to an [...]

CVE-2022-35414 – QEMU 4.1.50 through QEMU 7.0.0 – address_space_translate_for_iotlb allows a guest user to crash a host resulting in a denial of service.

11 July 2022

Title CVE-2022-35414 – QEMU 4.1.50 through QEMU 7.0.0 – address_space_translate_for_iotlb allows a guest user to crash a host resulting in a denial of service. CVE ID CVE-2022-35414 CVSS Score N/A [...]

Sick Codes @ DEF CON 30 August 11-14 2022!

30 June 2022

Pleased to announce we will be speaking at this year’s DEF CON 30 conference in Las Vegas, which will be an in-person event! You can purchase tickets at: https://defcon.org/ and [...]

CVE-2021-33318 IpMatcher v1.0.4.1 and below for .NET Core 2.0 and .NET Framework 4.5.2. incorrectly validates octal & hexadecimal input data, leading to indeterminate SSRF, LFI, RFI, and DoS vectors.

15 May 2022

Title CVE-2021-33318 IpMatcher v1.0.4.1 and below for .NET Core 2.0 and .NET Framework 4.5.2. incorrectly validates octal & hexadecimal input data, leading to indeterminate SSRF, LFI, RFI, and DoS vectors. [...]

CVE-2022-28345 – Signal client for iOS version 5.33.2 and below are vulnerable to RTLO Injection URI Spoofing using malicious URLs such as gepj.net/selif#/moc.elpmaxe which would appear as example.com/#files/ten.jpeg

14 April 2022

Title CVE-2022-28345 – Signal client for iOS version 5.33.2 and below are vulnerable to RTLO Injection URI Spoofing using malicious URLs such as gepj.net/selif#/moc.elpmaxe which would appear as example.com/#files/ten.jpeg CVE [...]

Exploit: RTLO Injection URI Spoofing: WhatsApp, iMessage (Messages app), Instagram, Facebook Messenger. CVE-2020-20093, CVE-2020-20094, CVE-2020-20095, CVE-2020-20096

24 March 2022

The post Exploit: RTLO Injection URI Spoofing: WhatsApp, iMessage (Messages app), Instagram, Facebook Messenger. CVE-2020-20093, CVE-2020-20094, CVE-2020-20095, CVE-2020-20096 appeared first on Sick Codes - Security Research, Hardware & Software Hacking, [...]

Fix DIVD-2022-00002: Grafana versions 8.0.0-beta1 through 8.3.0 installed via dpkg/deb package. Mitigation:

21 January 2022

In response to the amazing work by @j0v0x0 “Jordy Versmissen” from Detectify, the double-amazing Dutch Institute for Vulnerability Disclosure, known as DIVD CSIRT, contacted thousands of ISP/IP/Webmasters to resolve the [...]

CVE-2021-33669 – SAP Mobile SDK Certificate Provider – Insecure Temporary File Storage – Potential Symlink Attack & Denial of Service

4 October 2021

Title CVE-2021-33669 – SAP Mobile SDK Certificate Provider – Insecure Temporary File Storage – Potential Symlink Attack & Denial of Service CVE ID CVE-2021-33669 CVSS Score 7.8 Internal ID SICK-2021-032 [...]

CVE-2021-39246 – Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging – Windows, macOS, Linux

24 September 2021

Title CVE-2021-39246 – Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging – Windows, macOS, Linux CVE ID CVE-2021-39246 CVSS Score 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Internal [...]

Sick Codes Speaking @ CornCon Cyber Security Conference September 10-11, 2021 in Bettendorf, Iowa!

27 August 2021

Come see us live at CornCon September 10-11th 2021, discussing Ag Security, Supply Chain Security, and of course, tractor hacking. CornCon – Season 7 September 10-11, 2021 Event details/Tickets: https://corncon.net/ [...]

ESB-2023.7204 - [SUSE] java-1_8_0-ibm: CVSS (Max): 6.5

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7204 Security update for java-1_8_0-ibm 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: java-1_8_0-ibm Publisher: SUSE [...]

ESB-2023.7203 - [Ubuntu] Linux kernel: CVSS (Max): 9.8

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7203 USN-6496-2: Linux kernel vulnerabilities 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Linux kernel Publisher: [...]

ESB-2023.7206 - [SUSE] Cillium: CVSS (Max): 7.5

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7206 Updates Cilium 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Cillium Publisher: SUSE Operating System: [...]

ESB-2023.7205 - [SUSE] java-1_8_0-openj9: CVSS (Max): 6.5

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7205 Security update for java-1_8_0-openj9 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: java-1_8_0-openj9 Publisher: SUSE [...]

ESB-2023.7198 - [Ubuntu] Linux kernel: CVSS (Max): 9.8

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7198 USN-6494-2: Linux kernel vulnerabilities 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Linux kernel Publisher: [...]

ESB-2023.7207 - [RedHat] Apache Camel for Quarkus 3.2.0: CVSS (Max): 7.5

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7207 Red Hat Build of Apache Camel for Quarkus 3.2.0 release (RHBQ 3.2.9.Final) 1 December 2023 =========================================================================== AusCERT [...]

ESB-2023.7210 - [Debian] chromium: CVSS (Max): None

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7210 Debian Security Advisory DSA-5569-1 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: chromium Publisher: Debian [...]

ESB-2023.7200 - [Ubuntu] Linux kernel: CVSS (Max): 9.8

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7200 USN-6495-2: Linux kernel vulnerabilities 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Linux kernel Publisher: [...]

ESB-2023.7212 - [Mac] Safari: CVSS (Max): None

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7212 Safari 17.1.2 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Safari Publisher: Apple Operating System: [...]

ESB-2023.7211 - ALERT [Apple iOS] Apple: CVSS (Max): None

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7211 iOS 17.1.2 and iPadOS 17.1.2 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: iPadOS iOS [...]

ESB-2023.7213 - ALERT [Mac] macOS Sonoma: CVSS (Max): None

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7213 macOS Sonoma 14.1.2 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: macOS Sonoma Publisher: Apple [...]

ESB-2023.7214 - [Appliance] Delta Electronics DOPSoft: CVSS (Max): 7.8

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7214 ICS Advisory | ICSA-23-334-01 Delta Electronics DOPSoft 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: [...]

ESB-2023.7215 - [Appliance] Yokogawa STARDOM: CVSS (Max): 5.3

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7215 ICS Advisory | ICSA-23-334-02 Yokogawa STARDOM 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Yokogawa [...]

ESB-2023.7202 - [SUSE] freerdp: CVSS (Max): 6.5

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7202 Security update for freerdp 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: freerdp Publisher: SUSE [...]

ESB-2023.7209 - [RedHat] postgresql: CVSS (Max): 8.8

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7209 postgresql security update 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: postgresql Publisher: Red Hat [...]

ESB-2023.7201 - [SUSE] sqlite3: CVSS (Max): 8.8

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7201 Security update for sqlite3 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: sqlite3 Publisher: SUSE [...]

ESB-2023.7208 - [RedHat] Red Hat Quay: CVSS (Max): 7.5

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7208 Red Hat Quay security update 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Red Hat [...]

ESB-2023.7199 - [Ubuntu] Linux kernel: CVSS (Max): 9.8

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7199 USN-6502-4: Linux kernel vulnerabilities 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Linux kernel Publisher: [...]

ESB-2023.7216 - [Appliance] Mitsubishi Electric FA Engineering Software Products: CVSS (Max): 7.8

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7216 ICS Advisory | ICSA-23-334-04 Mitsubishi Electric FA Engineering Software Products 1 December 2023 =========================================================================== AusCERT Security Bulletin [...]

ESB-2023.7217 - [Appliance] PTC KEPServerEx: CVSS (Max): 9.1

1 December 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7217 ICS Advisory | ICSA-23-334-03 PTC KEPServerEx 1 December 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: PTC [...]

ESB-2023.7170 - [Ubuntu] GStreamer Bad Plugins: CVSS (Max): 8.8

30 November 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7170 USN-6526-1: GStreamer Bad Plugins vulnerabilities 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: GStreamer Bad [...]

ESB-2023.7168 - [Ubuntu] PyPy: CVSS (Max): 9.8

30 November 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7168 USN-6524-1: PyPy vulnerability 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: PyPy Publisher: Ubuntu Operating [...]

ESB-2023.7174 - [RedHat] OpenShift Container Platform 4.13.24: CVSS (Max): 7.5

30 November 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7174 OpenShift Container Platform 4.13.24 packages and security update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- [...]

ESB-2023.7172 - [RedHat] OpenShift Container Platform 4.11.54: CVSS (Max): 7.5

30 November 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7172 OpenShift Container Platform 4.11.54 bug fix and security update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary [...]

ESB-2023.7178 - [RedHat] postgresql:13: CVSS (Max): 8.8

30 November 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7178 postgresql:13 security update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: postgresql:13 Publisher: Red Hat [...]

ETSI WEBstore 2023 - Persistent Cross Site Vulnerability

26 July 2023

The vulnerability laboratory core research team discovered a persistent web vulnerability in the ETSI WebStore web-appli [...]

QWE DL v2.0.1 iOS - Persistent Cross Site Vulnerability

24 July 2023

The vulnerability laboratory core research team discovered a persistent vulnerability in the QWE DL v2.0.1 mobile ios we [...]

ViaTalk CP - Persistent XSS Web Vulnerability

21 July 2023

The vulnerability laboratory core research team discovered persistent web vulnerability in the viatalk control panel web [...]

ViaTalk CP - Cross Site Scripting Web Vulnerability

20 July 2023

The vulnerability laboratory core research team discovered a cross site web vulnerability in the viatalk control panel w [...]

PaulPrinting CMS - Multiple Cross Site Web Vulnerabilities

19 July 2023

The vulnerability laboratory core research team discovered multiple persistent cross site vulnerabilities in the PaulPri [...]

PaulPrinting CMS - (Search Delivery) Cross Site Vulnerability

17 July 2023

The vulnerability laboratory core research team discovered a non-persistent cross site vulnerability in the PaulPrinting [...]

Aures Booking & POS Terminal - Local Privilege Escalation

17 July 2023

The vulnerability laboratory core research team discovered a local kiosk privilege escalation vulnerability in the opera [...]

Tiva Events Calender v1.4 - Cross Site Scripting Vulnerability

5 July 2023

The vulnerability laboratory core research team discovered a persistent script code inject vulnerability in the Tiva Eve [...]

Dooblou WiFi File Explorer 1.13.3 - Multiple Vulnerabilities

4 July 2023

The vulnerability laboratory core research team discovered multiple web vulnerabilities in the official Dooblou WiFi Fil [...]

Active Super Shop CMS v2.5 - HTML Injection Vulnerabilities

4 July 2023

The vulnerability laboratory core research team discovered multiple html injection vulnerabilities in the Active Super S [...]

New FjordPhantom Android Malware Targets Banking Apps in Southeast Asia

1 December 2023

Cybersecurity researchers have disclosed a new sophisticated Android malware called FjordPhantom that has been observed targeting users in Southeast Asian countries like Indonesia, Thailand, and Vietnam since early September 2023. "Spreading primarily [...]

Qakbot Takedown Aftermath: Mitigations and Protecting Against Future Threats

1 December 2023

The U.S. Department of Justice (DOJ) and the FBI recently collaborated in a multinational operation to dismantle the notorious Qakbot malware and botnet. While the operation was successful in disrupting [...]

Chinese Hackers Using SugarGh0st RAT to Target South Korea and Uzbekistan

1 December 2023

A suspected Chinese-speaking threat actor has been attributed to a malicious campaign that targets the Uzbekistan Ministry of Foreign Affairs and South Korean users with a remote access trojan called SugarGh0st [...]

Discover How Gcore Thwarted Powerful 1.1Tbps and 1.6Tbps DDoS Attacks

1 December 2023

The most recent Gcore Radar report and its aftermath have highlighted a dramatic increase in DDoS attacks across multiple industries. At the beginning of 2023, the average strength of attacks reached 800 Gbps, but now, [...]

WhatsApp's New Secret Code Feature Lets Users Protect Private Chats with Password

1 December 2023

Meta-owned WhatsApp has launched a new Secret Code feature to help users protect sensitive conversations with a custom password on the messaging platform. The feature has been described as an "additional way to protect [...]

U.S. Treasury Sanctions North Korean Kimsuky Hackers and 8 Foreign-Based Agents

1 December 2023

The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) on Thursday sanctioned the North Korea-linked adversarial collective known as Kimsuky as well as eight foreign-based agents who [...]

Zyxel Releases Patches to Fix 15 Flaws in NAS, Firewall, and AP Devices

1 December 2023

Zyxel has released patches to address 15 security issues impacting network-attached storage (NAS), firewall, and access point (AP) devices, including three critical flaws that could lead to authentication bypass and [...]

Zero-Day Alert: Apple Rolls Out iOS, macOS, and Safari Patches for 2 Actively Exploited Flaws

1 December 2023

Apple has released software updates for iOS, iPadOS, macOS, and Safari web browser to address two security flaws that it said have come under active exploitation in the wild on older versions [...]

Google Unveils RETVec - Gmail's New Defense Against Spam and Malicious Emails

30 November 2023

Google has revealed a new multilingual text vectorizer called RETVec (short for Resilient and Efficient Text Vectorizer) to help detect potentially harmful content such as spam and malicious emails in Gmail. "RETVec is trained [...]

This Free Solution Provides Essential Third-Party Risk Management for SaaS

30 November 2023

Wing Security recently announced that basic third-party risk assessment is now available as a free product. But it raises the questions of how SaaS is connected to third-party risk management (TPRM) [...]

North Korea's Lazarus Group Rakes in $3 Billion from Cryptocurrency Hacks

30 November 2023

Threat actors from the Democratic People's Republic of Korea (DPRK) are increasingly targeting the cryptocurrency sector as a major revenue generation mechanism since at least 2017 to get around sanctions imposed against [...]

7 Uses for Generative AI to Enhance Security Operations

30 November 2023

Welcome to a world where Generative AI revolutionizes the field of cybersecurity. Generative AI refers to the use of artificial intelligence (AI) techniques to generate or create new data, such [...]

CACTUS Ransomware Exploits Qlik Sense Vulnerabilities in Targeted Attacks

30 November 2023

A CACTUS ransomware campaign has been observed exploiting recently disclosed security flaws in a cloud analytics and business intelligence platform called Qlik Sense to obtain a foothold into targeted environments. "This campaign [...]

U.S. Treasury Sanctions Sinbad Cryptocurrency Mixer Used by North Korean Hackers

30 November 2023

The U.S. Treasury Department on Wednesday imposed sanctions against Sinbad, a virtual currency mixer that has been put to use by the North Korea-linked Lazarus Group to launder ill-gotten proceeds. "Sinbad has processed [...]

Iranian Hackers Exploit PLCs in Attack on Water Authority in U.S.

29 November 2023

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) revealed that it's responding to a cyber attack that involved the active exploitation of Unitronics programmable logic controllers (PLCs) to target the [...]

200+ Malicious Android Apps Targeting Iranian Banks: Experts Warn

29 November 2023

An Android malware campaign targeting Iranian banks has expanded its capabilities and incorporated additional evasion tactics to fly under the radar. That's according to a new report from Zimperium, which [...]

Discover Why Proactive Web Security Outsmarts Traditional Antivirus Solutions

29 November 2023

In a rapidly evolving digital landscape, it's crucial to reevaluate how we secure web environments. Traditional antivirus-approach solutions have their merits, but they're reactive. A new report delves into the [...]

Okta Discloses Broader Impact Linked to October 2023 Support System Breach

29 November 2023

Identity services provider Okta has disclosed that it detected "additional threat actor activity" in connection with the October 2023 breach of its support case management system. "The threat actor downloaded the names [...]

DJVU Ransomware's Latest Variant 'Xaro' Disguised as Cracked Software

29 November 2023

A variant of a ransomware strain known as DJVU has been observed to be distributed in the form of cracked software. "While this attack pattern is not new, incidents involving [...]

GoTitan Botnet Spotted Exploiting Recent Apache ActiveMQ Vulnerability

29 November 2023

The recently disclosed critical security flaw impacting Apache ActiveMQ is being actively exploited by threat actors to distribute a new Go-based botnet called GoTitan as well as a .NET program known as PrCtrl [...]

Zero-Day Alert: Google Chrome Under Active Attack, Exploiting New Vulnerability

29 November 2023

Google has rolled out security updates to fix seven security issues in its Chrome browser, including a zero-day that has come under active exploitation in the wild. Tracked as CVE-2023-6345, the [...]

Transform Your Data Security Posture – Learn from SoFi's DSPM Success

28 November 2023

As cloud technology evolves, so does the challenge of securing sensitive data. In a world where data duplication and sprawl are common, organizations face increased risks of non-compliance and unauthorized [...]

Design Flaw in Google Workspace Could Let Attackers Gain Unauthorized Access

28 November 2023

Cybersecurity researchers have detailed a "severe design flaw" in Google Workspace's domain-wide delegation (DWD) feature that could be exploited by threat actors to facilitate privilege escalation and obtain unauthorized access [...]

How Hackers Phish for Your Users' Credentials and Sell Them

28 November 2023

Account credentials, a popular initial access vector, have become a valuable commodity in cybercrime. As a result, a single set of stolen credentials can put your organization’s entire network at [...]

Key Cybercriminals Behind Notorious Ransomware Families Arrested in Ukraine

28 November 2023

A coordinated law enforcement operation has led to the arrest of key individuals in Ukraine who are alleged to be a part of several ransomware schemes. "On 21 November, 30 [...]

ZDI-CAN-22032: Trend Micro

1 December 2023

A CVSS score 4.7 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) severity vulnerability discovered by 'NT AUTHORITY\ANONYMOUS LOGON' was reported to the affected vendor on: 2023-12-01, 0 days ago. The vendor is given until 2024-03-30 to [...]

ZDI-CAN-21984: NI

1 December 2023

A CVSS score 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) severity vulnerability discovered by '06fe5fd2bc53027c4a3b7e395af0b850e7b8a044' was reported to the affected vendor on: 2023-12-01, 0 days ago. The vendor is given until 2024-03-30 to publish a [...]

ZDI-CAN-22141: NI

1 December 2023

ZDI-CAN-22314: VIPRE

1 December 2023

A CVSS score 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2023-12-01, 0 days ago. The vendor is given until 2024-03-30 to publish a [...]

ZDI-CAN-21775: NI

1 December 2023

A CVSS score 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by '06fe5fd2bc53027c4a3b7e395af0b850e7b8a044' was reported to the affected vendor on: 2023-12-01, 0 days ago. The vendor is given until 2024-03-30 to publish a [...]

ZDI-CAN-22502: Delta Electronics

1 December 2023

A CVSS score 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2023-12-01, 0 days ago. The vendor is given until 2024-03-30 to publish a [...]

ZDI-CAN-22345: VIPRE

1 December 2023

ZDI-CAN-22316: VIPRE

1 December 2023

ZDI-CAN-22691: Hewlett Packard Enterprise

1 December 2023

A CVSS score 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2023-12-01, 0 days ago. The vendor is given until 2024-03-30 to publish a [...]

ZDI-CAN-22315: VIPRE

1 December 2023

ZDI-CAN-22454: Hewlett Packard Enterprise

1 December 2023

ZDI-CAN-22159: NI

1 December 2023

ZDI-CAN-22550: Lexmark

1 December 2023

A CVSS score 6.3 (AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) severity vulnerability discovered by 'Foundry Zero' was reported to the affected vendor on: 2023-12-01, 0 days ago. The vendor is given until 2024-03-30 to publish [...]

ZDI-CAN-22246: Avira

28 November 2023

A CVSS score 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2023-11-28, 3 days ago. The vendor is given until 2024-03-27 to publish a [...]

ZDI-CAN-22297: Centreon

28 November 2023

A CVSS score 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by '129cf345fa3dcf0fd346682161ba9a4f' was reported to the affected vendor on: 2023-11-28, 3 days ago. The vendor is given until 2024-03-27 to publish a [...]

ZDI-CAN-21773: NI

28 November 2023

A CVSS score 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by '06fe5fd2bc53027c4a3b7e395af0b850e7b8a044' was reported to the affected vendor on: 2023-11-28, 3 days ago. The vendor is given until 2024-03-27 to publish a [...]

ZDI-CAN-22635: Foxit

28 November 2023

A CVSS score 3.3 (AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2023-11-28, 3 days ago. The vendor is given until 2024-03-27 to publish a [...]

ZDI-CAN-22592: Foxit

28 November 2023

A CVSS score 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2023-11-28, 3 days ago. The vendor is given until 2024-03-27 to publish a [...]

ZDI-CAN-22247: Avira

28 November 2023

ZDI-CAN-22633: Foxit

28 November 2023

ZDI-CAN-22560: Wazuh

28 November 2023

A CVSS score 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by '@d0ntrash' was reported to the affected vendor on: 2023-11-28, 3 days ago. The vendor is given until 2024-03-27 to publish a [...]

ZDI-CAN-22294: Centreon

28 November 2023

A CVSS score 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by '129cf345fa3dcf0fd346682161ba9a4f' was reported to the affected vendor on: 2023-11-28, 3 days ago. The vendor is given until 2024-03-27 to publish a [...]

ZDI-CAN-22298: Centreon

28 November 2023

ZDI-CAN-22639: Foxit

28 November 2023

ZDI-CAN-22634: Foxit

28 November 2023

Student Loan Breach Exposes 2.5M Records

31 August 2022

2.5 million people were affected, in a breach that could spell more trouble down the line. [...]

Watering Hole Attacks Push ScanBox Keylogger

30 August 2022

Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. [...]

Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms

29 August 2022

Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. [...]

Ransomware Attacks are on the Rise

26 August 2022

Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. [...]

Cybercriminals Are Selling Access to Chinese Surveillance Cameras

25 August 2022

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. [...]

Twitter Whistleblower Complaint: The TL;DR Version

24 August 2022

Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. [...]

Firewall Bug Under Active Attack Triggers CISA Warning

23 August 2022

CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP. [...]

Fake Reservation Links Prey on Weary Travelers

22 August 2022

Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels. [...]

iPhone Users Urged to Update to Patch 2 Zero-Days

19 August 2022

Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack. [...]

Google Patches Chrome’s Fifth Zero-Day of the Year

18 August 2022

An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack. [...]

Frequently Asked Questions for CitrixBleed (CVE-2023-4966)

20 November 2023

Frequently asked questions relating to a critical vulnerability in Citrix NetScaler that has been under active exploitation for over a month, including by ransomware groups.Update November 22: This FAQ blog [...]

Microsoft’s November 2023 Patch Tuesday Addresses 57 CVEs (CVE-2023-36025)

14 November 2023

Microsoft addresses 57 CVEs, including three zero-day vulnerabilities that were exploited in the wild.3Critical54Important0Moderate0LowUpdate November 14: This blog has been updated to note the availability of fixes for Windows and [...]

CVE-2023-22518: Critical Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

3 November 2023

Atlassian warns of public vulnerability details for a critical flaw in Confluence Data Center and Server, as its CISO urges organizations to apply patches immediatelyUpdate November 7:The Background and Analysis [...]

CVE-2023-46747: Critical Authentication Bypass Vulnerability in F5 BIG-IP

27 October 2023

A critical authentication bypass vulnerability in F5’s BIG-IP could allow remote, unauthenticated attackers to execute system commands. Organizations are encouraged to apply patches as soon as possible.Update October 31: The [...]

Oracle October 2023 Critical Patch Update Addresses 176 CVEs

18 October 2023

Oracle addresses 176 CVEs in its fourth quarterly update of 2023 with 387 patches, including 46 critical updates. Background On October 17, Oracle released its Critical Patch Update (CPU) for [...]

CVE-2023-4966: Citrix NetScaler ADC and NetScaler Gateway Information Disclosure Exploited in the Wild

18 October 2023

A critical information disclosure vulnerability in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway has been exploited in the wild as a zero-day vulnerability. Organizations are urged to patch immediately. [...]

CVE-2023-20198: Zero-Day Vulnerability in Cisco IOS XE Exploited in the Wild

16 October 2023

A maximum severity CVSS 10 zero-day vulnerability in Cisco IOS XE has been exploited in the wild. Organizations should apply the mitigation steps from Cisco as soon as possible until [...]

Microsoft’s October 2023 Patch Tuesday Addresses 103 CVEs (CVE-2023-36563, CVE-2023-41763)

10 October 2023

Microsoft addresses 103 CVEs including two vulnerabilities that were exploited in the wild. Update October 13: The blog has been updated to include plugin coverage to identify systems with unsupported [...]

CVE-2023-38545, CVE-2023-38546: Frequently Asked Questions for New Vulnerabilities in curl

4 October 2023

Frequently asked questions relating to two vulnerabilities patched in curl version 8.4.0 Update October 13: The blog has been updated to include an additional asset detection plugin for libcurl. View [...]

MrBeast Scams: Verified Accounts, DeepFakes Used in Impersonations to Promote Fake Giveaways on YouTube and TikTok

4 October 2023

MrBeast, the most popular YouTube creator as of October 2023, has been impersonated in a variety of scams on YouTube and TikTok, including a recent deepfake promoting a fake free [...]

Attackers are Working Around The Clock. Luckily, So Are We.

30 November 2023

With the average cost of a breach at an all time high of $4.45 million, there’s an undeniable need for teams to enlist the right experts to quickly eradicate threats. [...]

Rapid7 Takes Next Step in AI Innovation with New AI-Powered Threat Detections

29 November 2023

A decades-long transition to cloud as the de-facto delivery model of choice has delivered undeniable value to the business landscape. [...]

Updates to Layered Context Enable Teams to Quickly Understand Which Risk Signals Are Most Pressing

28 November 2023

Layered Context introduced a consolidated view of all security risks insightCloudSec collects from the various layers of a cloud environment. [...]

Building our Team in Prague: Meet Martin Votruba

27 November 2023

From developing driver-assistance software for a luxury car brand to jumping on board an NFT startup, Martin Votruba, Lead Software Engineer, is not one to shy away from a challenge. [...]

Metasploit Wrap-up

23 November 2023

Metasploit 6.3.44 released with stability improvements and module fixes [...]

When Maximum Effort Doesn't Equate to Maximum Results

21 November 2023

It’s no secret that security teams are feeling beleaguered as a result of the barrage of data, events, and alerts generated by their security tools, increased budget scrutiny and constrained [...]

Rapid7 Introduces AI-driven Cloud Anomaly Detection

20 November 2023

AWS Re:Invent, Amazon Web Services’ annual mega-conference will soon kick off in Las Vegas and there are sure to be a ton of new cloud security innovations, including Rapid7's new [...]

Metasploit Weekly Wrap-Up

17 November 2023

Possible Web Service Removal Metasploit has support for running with a local database, or from a remote web service which can be initialized with msfdb init --component webservice. Future versions [...]

Manage Enterprise Risk at Scale with a Unified, Holistic Approach

16 November 2023

The rapid pace of technological change and the attendant rise of cyber threats in both speed and number leave most organizations at a disadvantage. [...]

Patch Tuesday - November 2023

14 November 2023

Zero day vulns in SmartScreen, DWM, Cloud Files mini driver, Office Protected View, ASP.NET. Overall fewer patches than usual. cURL patch. [...]

Metasploit Weekly Wrap-Up

10 November 2023

Apache MQ and Three Cisco Modules in a Trenchcoat This week’s release has a lot of new content and features modules targeting two major recent vulnerabilities that got a great [...]

CVE-2023-5950 Rapid7 Velociraptor Reflected XSS

10 November 2023

This advisory covers a specific issue identified in Velociraptor and disclosed by a security code review. Rapid7 Velociraptor versions prior to 0.7.0-4 suffer from a reflected cross site scripting vulnerability. [...]

Be Empathetic and Hug Your CISO More!

10 November 2023

In the rapidly evolving landscape of cloud computing, the adoption of multi-cloud environments has become a prevailing trend. Organizations increasingly turn to multiple cloud providers to harness diverse features, prevent [...]

NEW RESEARCH: Artificial intelligence and Machine Learning Can Be Used to Stop DAST Attacks Before they Start

9 November 2023

Artificial intelligence (AI) and machine learning (ML) can be used to thwart unwanted brute-force DAST attacks before they even begin. [...]

CVE-2023-47246: SysAid Zero-Day Vulnerability Exploited By Lace Tempest

9 November 2023

A new zero-day vulnerability (CVE-2023-47246) in SysAid IT service management software is being exploited by the threat group responsible for the MOVEit Transfer attack in May 2023. [...]

Description of the security update for Outlook 2016: August 11, 2020

1 January 4501

None Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Outlook when the software does not correctly handle objects in memory. It also resolves an [...]

KB5032391: Servicing stack update for Windows Server 2016: November 14, 2023

12 January 2027

None REMINDERWindows 10, version 1607 Mobile and Mobile Enterprise editions reached the end of service (EOS) on October 9, 2018. These editions will no longer be offered servicing stack updates.Windows [...]

March 14, 2023—KB5023752 (Security-only update)

13 October 2026

None IMPORTANT For Windows Server 2012, the end of support (EOS) date is October 10, 2023. Extended Security Updates (ESUs) will be available for purchase no later than October 2022, [...]

July 11, 2023—KB5028233 (Security-only update)

13 October 2026

None IMPORTANT Windows Server 2012 end of support (EOS) date is October 10, 2023. Extended Security Updates (ESUs) will be available for purchase no later than October 2022, but available [...]

March 14, 2023—KB5023765 (Monthly Rollup)

13 October 2026

None REMINDERWindows 8.1 reached end of support on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows 8.1, [...]

August 8, 2023—KB5029295 (Monthly Rollup)

13 October 2026

None REMINDER Windows Server 2012 end of support (EOS) date is October 10, 2023. Extended Security Updates (ESUs) will be available for purchase no later than October 2022, but available [...]

March 14, 2023—KB5023756 (Monthly Rollup)

13 October 2026

None IMPORTANT For Windows Server 2012, the end of support (EOS) date is October 10, 2023. Extended Security Updates (ESUs) will be available for purchase no later than October 2022, [...]

June 13, 2023—KB5027281 (Security-only update)

13 October 2026

None IMPORTANT For Windows Server 2012, the end of support (EOS) date is October 10, 2023. Extended Security Updates (ESUs) will be available for purchase no later than October 2022, [...]

October 10, 2023—KB5031419 (Monthly Rollup)

13 October 2026

None REMINDER Windows 8.1 reached end of support on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows [...]

February 14, 2023—KB5022903 (Monthly Rollup)

13 October 2026

None IMPORTANT For Windows Server 2012, the end of support (EOS) date is October 10, 2023. Extended Security Updates (ESUs) will be available for purchase no later than October 2022 [...]

KB5032308: Servicing stack update for Windows Server 2012 R2: November 14, 2023

13 October 2026

None REMINDER Windows 8.1 reached end of support (EOS) on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running [...]

August 8, 2023—KB5029312 (Monthly Rollup)

13 October 2026

None REMINDER Windows 8.1 reached end of support on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows [...]

February 14, 2023—KB5022894 (Security-only update)

13 October 2026

None REMINDERWindows 8.1 reached end of support on January 10, 2023, at which point technical assistance and software updates is no longer provided. If you have devices running Windows 8.1, [...]

October 10, 2023—KB5031442 (Monthly Rollup)

13 October 2026

None REMINDER Windows Server 2012 reached end of support (EOS) on October 10, 2023. Extended Security Updates (ESUs) are available for purchase and will continue for three years, renewable on [...]

July 11, 2023—KB5028232 (Monthly Rollup)

13 October 2026

None IMPORTANT Windows Server 2012 end of support (EOS) date is October 10, 2023. Extended Security Updates (ESUs) will be available for purchase no later than October 2022, but available [...]

September 12, 2023—KB5030269 (Monthly Rollup)

13 October 2026

None REMINDER Windows 8.1 reached end of support on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows [...]

March 14, 2023—KB5023764 (Security-only update)

13 October 2026

None REMINDERWindows 8.1 reached end of support on January 10, 2023, at which point technical assistance and software updates is no longer provided. If you have devices running Windows 8.1, [...]

July 11, 2023—KB5028223 (Security-only update)

13 October 2026

None REMINDERWindows 8.1 reached end of support on January 10, 2023, at which point technical assistance and software updates is no longer provided. If you have devices running Windows 8.1, [...]

April 11, 2023—KB5025285 (Monthly Rollup)

13 October 2026

None REMINDERWindows 8.1 reached end of support on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows 8.1, [...]

September 12, 2023—KB5030287 (Security-only update)

13 October 2026

None REMINDER Windows 8.1 reached end of support on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows [...]

February 14, 2023—KB5022895 (Security-only update)

13 October 2026

None IMPORTANT For Windows Server 2012, the end of support (EOS) date is October 10, 2023. Extended Security Updates (ESUs) will be available for purchase no later than October 2022 [...]

April 11, 2023—KB5025272 (Security-only update)

13 October 2026

None IMPORTANT For Windows Server 2012, the end of support (EOS) date is October 10, 2023. Extended Security Updates (ESUs) will be available for purchase no later than October 2022, [...]

KB5032309: Servicing stack update for Windows Server 2012: November 14, 2023

13 October 2026

None REMINDER Windows Server 2012 reached end of support (EOS) on October 10, 2023. Extended Security Updates (ESUs) are available for purchase and will continue for three years, renewable on [...]

July 11, 2023—KB5028228 (Monthly Rollup)

13 October 2026

None REMINDERWindows 8.1 reached end of support on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows 8.1, [...]

August 8, 2023—KB5029304 (Security-only update)

13 October 2026

None REMINDER Windows 8.1 reached end of support on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows [...]

AgentSmith HIDS – Host Based Intrusion Detection

31 August 2023

AgentSmith HIDS is a powerful component of a Host-based Intrusion Detection system, it has anti-rootkit functionalities and is a very performant way to collect information about a host. [...]

padre – Padding Oracle Attack Exploiter Tool

28 May 2023

padre is an advanced exploiter and Padding Oracle attack tool that can be deployed against CBC mode encryption. [...]

Privacy Implications of Web 3.0 and Darknets

31 March 2023

The evolution of the internet has been rapid over the years and has impacted the privacy implications of Web 3.0 and Darknets [...]

DataSurgeon – Extract Sensitive Information (PII) From Logs

20 March 2023

DataSurgeon (ds) is a versatile tool designed to Extract Sensitive Information (PII) From Logs, it's intended to be used for incident response, penetration testing, and CTF challenges. [...]

Pwnagotchi – Maximize Crackable WPA Key Material For Bettercap

12 February 2023

Pwnagotchi is an A2C-based "AI" leveraging bettercap that learns from its surrounding WiFi environment to maximize crackable WPA key material it captures [...]

HardCIDR – Network CIDR and Range Discovery Tool

29 December 2022

HardCIDR is a Linux Bash script to discover the netblocks, or ranges, (in CIDR notation) owned by the target organization during the intelligence gathering phase of a penetration test. [...]

Socialscan – Command-Line Tool To Check For Email And Social Media Username Usage

29 April 2022

socialscan is an accurate command-line tool to check For email and social media username usage on online platforms, given an email address or username, socialscan returns whether it is available, [...]

CFRipper – CloudFormation Security Scanning & Audit Tool

23 January 2022

CFRipper is a Python-based Library and CLI security analyzer that functions as an AWS CloudFormation security scanning and audit tool, it aims to prevent vulnerabilities from getting to production infrastructure [...]

CredNinja – Test Credential Validity of Dumped Credentials or Hashes

5 January 2022

CredNinja is a tool to quickly test credential validity of dumped credentials (or hashes) across an entire network or domain very efficiently. At the core of it, you provide it [...]

assetfinder – Find Related Domains and Subdomains

29 December 2021

assetfinder is a Go-based tool to find related domains and subdomains that are potentially related to a given domain from a variety of sources including Facebook, ThreatCrowd, Virustotal and more. [...]

Pipidae – the latest malware to take over the Mac ecosystem

1 December 2023

What is Pipidae? Recently, a wave of disturbing pop-up alerts that proclaim “Pipidae will damage… Pipidae – the latest malware to take over the Mac ecosystem on Latest Hacking News [...]

Google Workspace Design Flaw Allows Unauthorized Access

29 November 2023

Researchers publicly disclosed a design flaw affecting Google Workspace that allows unauthorized access. While they… Google Workspace Design Flaw Allows Unauthorized Access on Latest Hacking News | Cyber Security News, [...]

Atomic Stealer Again Targets Mac Via Fake Browser Updates

28 November 2023

The notorious Atomic malware – a known macOS stealer – again targets Mac devices. In… Atomic Stealer Again Targets Mac Via Fake Browser Updates on Latest Hacking News | Cyber [...]

Essential Baby Gadgets for Modern Parents

28 November 2023

Being a parent in the modern age comes with challenges and conveniences, thanks to the… Essential Baby Gadgets for Modern Parents on Latest Hacking News | Cyber Security News, Hacking [...]

Design Flaw in Domain-Wide Delegation Could Leave Google Workspace Vulnerable for Takeover, Says Cybersecurity Company Hunters

28 November 2023

BOSTON, MASS. and TEL AVIV, ISRAEL, November 28, 2023 – A severe design flaw in… Design Flaw in Domain-Wide Delegation Could Leave Google Workspace Vulnerable for Takeover, Says Cybersecurity Company [...]

Multiple Vulnerabilities Found In ownCloud File Sharing App

27 November 2023

Numerous security vulnerabilities riddled the privacy of ownCloud users that the vendor patched recently. Exploiting… Multiple Vulnerabilities Found In ownCloud File Sharing App on Latest Hacking News | Cyber Security [...]

Microsoft Defender Lures Researchers With Bug Bounty Program

27 November 2023

The Redmond giant has introduced a dedicated bug bounty program for its Microsoft Defender security… Microsoft Defender Lures Researchers With Bug Bounty Program on Latest Hacking News | Cyber Security [...]

Konni RAT Malware Campaign Spreads Via Malicious Word Files

27 November 2023

Researchers caught a new campaign from the notorious Konni RAT malware exploiting malicious Word files.… Konni RAT Malware Campaign Spreads Via Malicious Word Files on Latest Hacking News | Cyber [...]

New Alerts Issued For CitrixBleed Flaw Following Active Exploits

27 November 2023

Given the continuous rise in active exploitation of the now-known CitrixBleed flaw, governments issued new… New Alerts Issued For CitrixBleed Flaw Following Active Exploits on Latest Hacking News | Cyber [...]

Canada Government Admits Data Breach Impacting Public Employees

22 November 2023

The Government of Canada recently admitted suffering a security breach that impacted data of current… Canada Government Admits Data Breach Impacting Public Employees on Latest Hacking News | Cyber Security [...]

IT threat evolution in Q3 2023. Mobile statistics

1 December 2023

Mobile threat statistics for Q3 2023 include data on malware, adware, banking Trojans and ransomware for Android devices. [...]

IT threat evolution Q3 2023

1 December 2023

Attacks on a critical infrastructure target in South Africa, supply-chain attack on Linux machines, Telegram doppelganger used to target people in China. [...]

IT threat evolution in Q3 2023. Non-mobile statistics

1 December 2023

PC malware statistics for Q3 2023 include data on miners, ransomware, banking Trojans and other threats to Windows, macOS and IoT equipment. [...]

Consumer cyberthreats: predictions for 2024

23 November 2023

Kaspersky experts review last year's predictions on consumer cyberthreats and try to anticipate the trends for 2024. [...]

HrServ – Previously unknown web shell used in APT attack

22 November 2023

In this report Kaspersky researchers provide an analysis of the previously unknown HrServ web shell, which exhibits both APT and crimeware features and has likely been active since 2021. [...]

Crimeware and financial cyberthreats in 2024

21 November 2023

Kaspersky assesses last year’s predictions for the financial threat landscape, and tries to anticipate crimeware trends for the coming year 2024. [...]

The dark side of Black Friday: decoding cyberthreats around the year’s biggest shopping season

20 November 2023

As Black Friday approaches, Kaspersky analyzes phishing and spam activity around major sales events, and reviews statistics on online shopping threats in 2023. [...]

Advanced threat predictions for 2024

14 November 2023

Kaspersky researchers review APT predictions for 2023 and current trends in the advanced threat landscape, and try to predict how it will develop in 2024. [...]

Ducktail fashion week

10 November 2023

The Ducktail malware, designed to hijack Facebook business and ads accounts, sends marketing professionals fake ads for jobs with major clothing manufacturers. [...]

Modern Asian APT groups’ tactics, techniques and procedures (TTPs)

9 November 2023

Asian APT groups target various organizations from a multitude of regions and industries. We created this report to provide the cybersecurity community with the best-prepared intelligence data to effectively counteract [...]

Extracting GPT’s Training Data

30 November 2023

This is clever: The actual attack is kind of silly. We prompt the model with the command “Repeat the word ‘poem’ forever” and sit back and watch as the model [...]

Breaking Laptop Fingerprint Sensors

29 November 2023

They’re not that good: Security researchers Jesse D’Aguanno and Timo Teräs write that, with varying degrees of reverse-engineering and using some external hardware, they were able to fool the Goodix [...]

Digital Car Keys Are Coming

28 November 2023

Soon we will be able to unlock and start our cars from our phones. Let’s hope people are thinking about security. [...]

Secret White House Warrantless Surveillance Program

27 November 2023

There seems to be no end to warrantless surveillance: According to the letter, a surveillance program now known as Data Analytical Services (DAS) has for more than a decade allowed [...]

Friday Squid Blogging: Squid Nebula

24 November 2023

Pretty photograph. The Squid Nebula is shown in blue, indicating doubly ionized oxygen—which is when you ionize your oxygen once and then ionize it again just to make sure. (In [...]

Chocolate Swiss Army Knife

24 November 2023

It’s realistic looking. If I drop it in a bin with my keys and wallet, will the TSA confiscate it? [...]

LitterDrifter USB Worm

24 November 2023

A new worm that spreads via USB sticks is infecting computers in Ukraine and beyond. The group—known by many names, including Gamaredon, Primitive Bear, ACTINIUM, Armageddon, and Shuckworm—has been active [...]

Apple to Add Manual Authentication to iMessage

22 November 2023

Signal has had the ability to manually authenticate another account for years. iMessage is getting it: The feature is called Contact Key Verification, and it does just what its name [...]

Email Security Flaw Found in the Wild

21 November 2023

Google’s Threat Analysis Group announced a zero-day against the Zimbra Collaboration email server that has been used against governments around the world. TAG has observed four different groups exploiting the [...]

Using Generative AI for Surveillance

20 November 2023

Generative AI is going to be a powerful tool for data analysis and summarization. Here’s an example of it being used for sentiment analysis. My guess is that it isn’t [...]

Apple Issues Urgent Security Patches for Zero-Day Vulnerabilities

1 December 2023

By Waqas Immediate Action Required: Update Your Apple Devices, Including iPads, MacBooks, and iPhones, NOW! This is a post from HackRead.com Read the original post: Apple Issues Urgent Security Patches [...]

Android Banking Malware FjordPhantom Steals Funds Via Virtualization

30 November 2023

By Waqas Thus far, the FjordPhantom malware has defrauded victims of around $280,000 (£225,000). This is a post from HackRead.com Read the original post: Android Banking Malware FjordPhantom Steals Funds [...]

68% of US Websites Exposed to Bot Attacks

30 November 2023

By Deeba Ahmed The conclusion was reached after researchers evaluated over 9,500 of the largest transactional websites in terms of traffic,… This is a post from HackRead.com Read the original [...]

Zoom Vulnerability Allowed Hackers to Take Over Meetings, Steal Data

29 November 2023

By Waqas A critical Zoom Room vulnerability allowed exploiting service accounts for unauthorized tenant access. This is a post from HackRead.com Read the original post: Zoom Vulnerability Allowed Hackers to [...]

US Seizes Bitcoin Mixer Sinbad.io Used by Lazarus Group

29 November 2023

By Waqas US Treasury Sanctions Sinbad.io for Laundering Millions in Stolen Funds Linked to North Korea's Lazarus Group. This is a post from HackRead.com Read the original post: US Seizes [...]

Cybercriminals Exploit ActiveMQ Flaw to Spread GoTitan Botnet, PrCtrl Rat

29 November 2023

By Deeba Ahmed The ActiveMQ flaw has been patched, but despite this, numerous threat actors continue to exploit it. This is a post from HackRead.com Read the original post: Cybercriminals [...]

How Internet Radio Hosting Royalties Fuel the Digital Airwaves

29 November 2023

By Owais Sultan In today’s era, where streaming platforms reign supreme in the music industry, internet radio continues to thrive as… This is a post from HackRead.com Read the original [...]

OwnCloud “graphapi” App Vulnerability Exposes Sensitive Data

29 November 2023

By Deeba Ahmed The vulnerability is tracked as CVE-2023-49103 and declared critical with a CVSS v3 Base Score 10. This is a post from HackRead.com Read the original post: OwnCloud “graphapi” App [...]

Hamas-Linked Group Revives SysJoker Malware, Leverages OneDrive

29 November 2023

By Waqas Hamas launches a new variant of Rust-based, multi-platform backdoor sysJoker against targets in Israel. This is a post from HackRead.com Read the original post: Hamas-Linked Group Revives SysJoker [...]

Ukraine Hacks Russia’s Aviation Agency, Claims “Aviation Cannibalism”

28 November 2023

By Deeba Ahmed In a press release, Ukraine’s intelligence agency referred to the hacking as a “successful complex special operation in cyberspace.” This is a post from HackRead.com Read the original [...]

In Other News: Utilities Targeted by Hackers, Aerospace Attacks, Killnet Leader Unmasked

1 December 2023

Noteworthy stories that might have slipped under the radar: Utilities in US and Europe targeted in attacks, aerospace hacks, and Killnet leader unmasked. The post In Other News: Utilities Targeted [...]

New ‘Turtle’ macOS Ransomware Analyzed

1 December 2023

New Turtle macOS ransomware is not sophisticated but shows that cybercriminals continue to target Apple devices. The post New ‘Turtle’ macOS Ransomware Analyzed appeared first on SecurityWeek. [...]

US Sanctions North Korean Cyberespionage Group Kimsuky

1 December 2023

The US has announced sanctions against North Korean cyberespionage group Kimsuky over its intelligence gathering activities. The post US Sanctions North Korean Cyberespionage Group Kimsuky appeared first on SecurityWeek. [...]

Simple Attack Allowed Extraction of ChatGPT Training Data

1 December 2023

Researchers found that a ‘silly’ attack method could have been used to trick ChatGPT into handing over training data. The post Simple Attack Allowed Extraction of ChatGPT Training Data appeared [...]

Apple Patches WebKit Flaws Exploited on Older iPhones

30 November 2023

Apple's security response team warns that flaws CVE-2023-42916 and CVE-2023-42917 were already exploited against versions of iOS before iOS 16.7.1. The post Apple Patches WebKit Flaws Exploited on Older iPhones [...]

Major Security Flaws in Zyxel Firewalls, Access Points, NAS Devices

30 November 2023

Zyxel patches at least 15 security flaws that expose users to authentication bypass, command injection and denial-of-service attacks. The post Major Security Flaws in Zyxel Firewalls, Access Points, NAS Devices [...]

Meta Takes Action Against Multiple Foreign Influence Campaigns

30 November 2023

Meta removed three foreign influence operations from the Facebook platform during Q3, 2023. Two were Chinese in origin, and one was Russian, the company says. The post Meta Takes Action [...]

Qlik Sense Vulnerabilities Exploited in Ransomware Attacks

30 November 2023

Qlik Sense vulnerabilities CVE-2023-41266, CVE-2023-41265 and CVE-2023-48365 exploited for initial access in Cactus ransomware attacks. The post Qlik Sense Vulnerabilities Exploited in Ransomware Attacks appeared first on SecurityWeek. [...]

Black Basta Ransomware Group Received Over $100 Million From 90 Victims

30 November 2023

The Black Basta ransomware group has infected over 300 victims and received more than $100 million in ransom payments. The post Black Basta Ransomware Group Received Over $100 Million From [...]

US Sanctions Cryptocurrency Mixer Sinbad for Aiding North Korean Hackers

30 November 2023

US Treasury sanctions Sinbad, saying the cryptocurrency mixer is laundering funds for North Korean hacking group Lazarus. The post US Sanctions Cryptocurrency Mixer Sinbad for Aiding North Korean Hackers appeared [...]

Apple Fixed a Zero-Day Vulnerability that Actively Exploited WebKit

1 December 2023

A WebKit patch for a zero-day vulnerability identified as CVE-2023-23529 is included in the macOS, [...]

Hackers on Booking.com escalate their assaults against users

1 December 2023

Hackers are using advertisements on dark web forums to target Booking.com customers more frequently and [...]

Hackers use Unitronics PLCs that are exposed to breach a US water facility

30 November 2023

The Cybersecurity & Infrastructure Security Agency, or CISA, has issued a warning that malevolent actors [...]

A Welltok data breach resulting from a MOVEit hack

30 November 2023

Health plans nationwide were informed about the MOVEit hack, which affected 8.5 million people, by [...]

Attackers are actively using a newly discovered vulnerability in Google Chrome

29 November 2023

A zero-day vulnerability that is being actively exploited in the wild is among the seven [...]

DP World Australia has issued a statement confirming that employee data stolen

28 November 2023

DP World Australia has issued a detailed statement on the incident and its ongoing investigations [...]

After a ransomware attack, six states’ Ardent hospital emergency rooms were disrupted

28 November 2023

The healthcare company Ardent Health Services, which manages 30 hospitals in six states in the [...]

Cyberattacks and data theft claims are being looked into by General Electric

27 November 2023

General Electric is looking into allegations that a threat actor broke into the business’s development [...]

Rhysida ransomware group attacked the British Library

24 November 2023

One of the biggest libraries in the world and the National Library of the United [...]

Cybercriminals and nation-state hackers target the “Citrix Bleed” vulnerability

23 November 2023

Federal cyber officials warned on Tuesday that nation-state hackers and cybercriminal gangs are both taking [...]

We’re going teetotal: It’s goodbye to The Daily Swig

2 March 2023

PortSwigger today announces that The Daily Swig is closing down [...]

Bug Bounty Radar // The latest bug bounty programs for March 2023

28 February 2023

New web targets for the discerning hacker [...]

Indian transport ministry flaws potentially allowed creation of counterfeit driving licenses

28 February 2023

Armed with personal data fragments, a researcher could also access 185 million citizens’ PII [...]

Password managers: A rough guide to enterprise secret platforms

27 February 2023

The second part of our password manager series looks at business-grade tech to handle API tokens, login credentials, and more [...]

Chromium bug allowed SameSite cookie bypass on Android devices

27 February 2023

Protections against cross-site request forgery could be bypassed [...]

Deserialized web security roundup: Twitter 2FA backlash, GoDaddy suffers years-long attack campaign, and XSS Hunter adds e2e encryption

24 February 2023

Your fortnightly rundown of AppSec vulnerabilities, new hacking techniques, and other cybersecurity news [...]

NIST plots biggest ever reform of Cybersecurity Framework

23 February 2023

CSF 2.0 blueprint offered up for public review [...]

Cisco ClamAV anti-malware scanner vulnerable to serious security flaw

22 February 2023

Patch released for bug that poses a critical risk to vulnerable technologies [...]

CVSS system criticized for failure to address real-world impact

21 February 2023

JFrog argues vulnerability risk metrics need complete revamp [...]

‘Most web API flaws are missed by standard security tests’ – Corey J Ball on securing a neglected attack vector

20 February 2023

API security is a ‘great gateway’ into a pen testing career, advises specialist in the field [...]

HTTP request smuggling bug patched in HAProxy

17 February 2023

Exploitation could enable attackers to access backend servers [...]

Belgium launches nationwide safe harbor for ethical hackers

15 February 2023

New legal protections for security researchers could be the strongest of any EU country [...]

Remote code execution flaw patched in Apache Kafka

15 February 2023

Possible RCE and denial-of-service issue discovered in Kafka Connect [...]

Password manager security: Which is the right option for me?

14 February 2023

The first guide of our two-part series helps consumers choose the best way to manage their login credentials [...]

Deserialized web security roundup: KeePass dismisses ‘vulnerability’ report, OpenSSL gets patched, and Reddit admits phishing hack

10 February 2023

Your fortnightly rundown of AppSec vulnerabilities, new hacking techniques, and other cybersecurity news [...]

OAuth ‘masterclass’ crowned top web hacking technique of 2022

10 February 2023

Single sign-on and request smuggling to the fore in another stellar year for web security research [...]

Radio silence from DMS vendor quartet over XSS zero-days

10 February 2023

No response or patch yet forthcoming from providers of vulnerable document management systems [...]

New XSS Hunter host Truffle Security faces privacy backlash

9 February 2023

Anonymized numbers of bug discoveries swiftly deleted after pushback [...]

Second UK Computer Misuse Act consultation reflects ‘very little progress’

8 February 2023

Campaigner bemoans glacial progress of review and urges government to set clear timetable [...]

DOM XSS vulnerability in Gartner Peer Insights widget patched

8 February 2023

Web attack vector closed after failed fix [...]

Toyota sealed up a backdoor to its global supplier management network

7 February 2023

Hacker praises carmaker’s prompt response to the (mercifully) good-faith pwnage [...]

Google engineers plot to mitigate prototype pollution

6 February 2023

Plan to create boundary between JavaScript objects and their blueprints gathers momentum [...]

Serious security hole plugged in infosec tool binwalk

3 February 2023

Path traversals could ‘void reverse engineering efforts and tamper with evidence collected’ [...]

Truffle Security relaunches XSS Hunter tool with new features

2 February 2023

Popular hacking aid now available with CORS misconfig detection function following end-of-life announcement [...]

Researcher drops Lexmark RCE zero-day rather than sell vuln ‘for peanuts’

1 February 2023

Printer exploit chain could be weaponized to fully compromise more than 100 models [...]

Unveiling the Deceptive Dance: Phobos Ransomware Masquerading As VX-Underground

23 November 2023

During a recent hunt, Qualys Threat Research has come across a ransomware family known as Phobos, impersonating VX-Underground. Phobos ransomware has been knocking on our door since early 2019 and [...]

Atlassian Confluence Broken Access Control Vulnerability (CVE-2023-22515)

15 November 2023

Atlassian issued an Advisory on October 4, 2023, for CVE-2023-22515, a critical severity vulnerability affecting Confluence Server and Data Center. According to the advisory, the vulnerability was initially published as [...]

Microsoft and Adobe Patch Tuesday, November 2023 Security Update Review

14 November 2023

Microsoft released its second last Patch Tuesday edition of the year. We invite you to join us to review and discuss the details of these security updates and patches. Microsoft [...]

Oracle Patch Tuesday, October 2023 Security Update Review

18 October 2023

Oracle has released its fourth quarterly edition of Critical Patch Update, which contains a group of patches for 387 security vulnerabilities. Some of the vulnerabilities addressed in this update impact [...]

CVE-2023-44487 HTTP/2 Rapid Reset Attack

10 October 2023

Today, Amazon Web Services, Cloudflare, and Google, in a coordinated announcement, reveal their experiences mitigating powerful HTTP/2-based DDoS attacks utilizing a zero-day technique referred to as ‘Rapid Reset’, documented under [...]

Microsoft and Adobe Patch Tuesday, October 2023 Security Update Review

10 October 2023

Microsoft released its October edition of Patch Tuesday! In this month’s updates, Microsoft has addressed 105 vulnerabilities in different products, features, and roles. Let’s take a look at the updates [...]

Curl 8.4.0 – Proactively Identifying Potential Vulnerable Assets

6 October 2023

On Wednesday, October 4, 2023, the curl project maintainers announced pre-notification for curl version 8.4.0 to be released on October 11. This version will fix two new vulnerabilities with one [...]

CVE-2023-4911: Looney Tunables – Local Privilege Escalation in the glibc’s ld.so

3 October 2023

The Qualys Threat Research Unit (TRU) has discovered a buffer overflow vulnerability in GNU C Library’s dynamic loader’s processing of the GLIBC_TUNABLES environment variable. We have successfully identified and exploited [...]

Qualys Survey of Top 10 Exploited Vulnerabilities in 2023

26 September 2023

The Qualys Threat Research Unit (TRU) has thoroughly analyzed vulnerabilities reported in 2023. Our comprehensive study assesses factors including weaponization status, existence in the CISA KEV, instances or usage of [...]

Qualys Is the Outperformer in the New GigaOm Radar Report for Continuous Vulnerability Management

18 September 2023

GigaOm has unveiled its third-annual Radar for Continuous Vulnerability Management featuring Qualys. In this Report, GigaOm provides a detailed analysis of the value and progression of vulnerability management (VM) capabilities [...]

Hotel’s Booking.com Hacked Logins Let Attacker Steal Guest Credit Cards

1 December 2023

According to a recent report by Secureworks, a well-planned and advanced phishing attack was carried out, specifically targeting hotels and their guests, through the popular website Booking.com. The attackers utilized [...]

Critical Zoom Vulnerability Let Attackers Take Over Meetings

1 December 2023

Zoom, the most widely used video conferencing platform has been discovered with a critical vulnerability that threat actors could potentially exploit for various malicious purposes. This vulnerability was reported as [...]

Hackers Using Weaponized Invoice to Deliver LUMMA Malware

30 November 2023

Hackers use weaponized invoices to exploit trust in financial transactions, embedding malware or malicious links within seemingly legitimate payment requests. This tactic aims to deceive recipients into opening the invoice, [...]

US-Seized Crypto Currency Mixer Used by North Korean Lazarus Hackers

30 November 2023

The U.S. Treasury Department sanctioned the famous cryptocurrency mixer Sinbad after it was claimed that the North Korean hacker group Lazarus was using it to launder funds that had been stolen. [...]

CISA Warns Hackers Exploiting Wastewater Systems Logic Controllers

30 November 2023

In a disconcerting turn of events, cyber threat actors have set their sights on Unitronics programmable logic controllers (PLCs) embedded in Water and Wastewater Systems (WWS). This perilous trend casts [...]

Zyxel Command Injection Flaws Let Attackers Run OS Commands

30 November 2023

Three Command injection vulnerabilities have been discovered in Zyxel NAS (Network Attached Storage) products, which could allow a threat actor to execute system commands on successful exploitation of these vulnerabilities. [...]

North Korean Hackers Attacking macOS Using Weaponized Documents

30 November 2023

Hackers often use weaponized documents to exploit vulnerabilities in software, which enables the execution of malicious code. All these documents contain malicious code or macros, often disguised as familiar files, [...]

30 November 2023

The latest analysis shows that tens of millions of people are creating weak passwords on three of the four most popular websites in the world, which do not fulfill the [...]

Chrome Zero-Day Vulnerability That Exploited In The Wild

29 November 2023

Google has fixed the sixth Chrome zero-day bug that was exploited in the wild this year. The flaw, identified as CVE-2023-6345, is classified as an integer overflow in Skia, an open-source 2D [...]

Iranian Mobile Banking Malware Steal Login Credentials & Steal OTP Codes

29 November 2023

An Android malware campaign was previously discovered that distributed banking trojans targeting four major Iranian Banks: Bank Mellat, Bank Saderat, Resalat Bank, and Central Bank of Iran. There were 40 [...]

BlueVoyant Raises $140M, Buys Resilience Firm Conquest Cyber

1 December 2023

The integration of BlueVoyant and Conquest Cyber will provide customers with more self-service capabilities and autonomous operations through the use of AI, machine learning, and virtual data lakes. [...]

Hackers Use new Tool Set in Targeted Attacks Against Middle East, Africa and the US

1 December 2023

A new set of tools, including a backdoor, a credential-stealing module, and a customized version of Mimikatz, has been used in targeted attacks against organizations in the Middle East, Africa, [...]

Russian and Chinese Interference Networks are ‘Building Audiences’ Ahead of 2024, Warns Meta

1 December 2023

Meta has disrupted influence operations from China and Russia, highlighting the challenges posed by generative artificial intelligence and the use of perception hacking to sow doubt in democratic processes. [...]

Update: MGM CFO Expects Insurance to Cover Cyberattack Costs

1 December 2023

The impact of the cyberattack on MGM Resorts was largely felt in September and has been mostly resolved by October, with the company reporting that business is back to normal. [...]

Ukrainian Gets Eight-Year Sentence for Running Marketplace for Americans’ Data

1 December 2023

Vitalii Chychasov, a Ukrainian citizen, has been sentenced to eight years in prison for running a marketplace that sold personal information of millions of Americans, impacting about 24 million people [...]

Google Unveils RETVec - Gmail's New Defense Against Spam and Malicious Emails

1 December 2023

Integration of RETVec in Gmail has significantly improved spam detection rates, reduced false positives, and decreased computational costs, making it ideal for large-scale applications and on-device models. [...]

Five Resolutions to Prepare for SEC’s New Cyber Disclosure Rules

1 December 2023

The new SEC rules on cybersecurity risk management and incident disclosure will require publicly traded companies to reevaluate their security strategies and provide investors with a greater understanding of the [...]

LogoFAIL Bugs in UEFI Code Allow Planting Bootkits via Images

1 December 2023

LogoFAIL is a set of security vulnerabilities that affect the image-parsing components in the UEFI code used by various vendors. These vulnerabilities can be exploited to hijack the booting process [...]

WhatsApp’s New Secret Code Feature Hides Your Locked Chats

1 December 2023

WhatsApp has introduced a new Secret Code feature that allows users to set a custom password to hide and protect their locked chats. The Chat Lock feature automatically conceals locked [...]

English Council Spent $1.4 Million Recovering From Ransomware Attack

1 December 2023

The attack, initiated through a spearphishing email, exposed failures in the council's cybersecurity measures, including the lack of a security information and event management system, hindering the investigation and remediation [...]

Black Basta Ransomware Made Over $100 Million From Extortion

1 December 2023

Black Basta has collected over $100 million in ransom payments from over 90 victims since April 2022. High-profile victims targeted by Black Basta include the American Dental Association, Sobeys, Knauf, [...]

Open-Source LLM Security Scanner Vigil Helps Prevent Prompt Injection

1 December 2023

Vigil focuses on identifying prompt injections, jailbreaks, and other potential vulnerabilities. Its creator, Adam M. Swanda, developed the tool to improve security practices around LLM applications. [...]

New SugarGh0st RAT Targets Uzbekistan Government and South Korea

1 December 2023

The campaign involves the use of Windows Shortcut files embedded with malicious JavaScript to deliver the components of the trojan, and there are indications that a Chinese-speaking threat actor is [...]

PoC for Splunk Enterprise RCE flaw released (CVE-2023-46214)

1 December 2023

The vulnerability arises from the failure to safely sanitize user-supplied extensible stylesheet language transformations (XSLT), enabling attackers to upload malicious XSLT and gain remote access to Splunk Enterprise instances. [...]

Apple Rolls Out iOS, macOS, and Safari Patches for Two Actively Exploited Flaws

1 December 2023

The two actively exploited security flaws, CVE-2023-42916 and CVE-2023-42917, were found in the WebKit web browser engine and could leak sensitive information or allow arbitrary code execution. [...]

New Android Malware FjordPhantom Spreads Covertly Via Email, SMS, & Messaging Apps

1 December 2023

In the ever-evolving realm of cybersecurity, Promon, a trailblazer in mobile security solutions, has brought to light a novel adversary—FjordPhantom. This Android malware employs avant-garde techniques, notably virtualization, to elude [...]

New SugarGh0st RAT Delivered via Malicious Windows Shortcut & JavaScript

1 December 2023

Hackers use Remote Access Trojans (RATs) to gain unauthorized access and control over a victim’s computer remotely. RATs allow threat actors to execute the following malicious actions while remaining hidden [...]

Black Basta Ransomware Received Over $100 Million From Victims

1 December 2023

Black Basta, the fourth-most active ransomware strain with more than 329 victims, has reportedly made over $100 million in ransom payments. This ransomware has also been discovered to resemble the [...]

Notepad++ Input Validation Flaws Leads to uncontrolled Search Path Vulnerability

1 December 2023

Notepad++ has been discovered with an uncontrolled search path vulnerability, which could allow threat actors to search an untrusted search path. This vulnerability has been disclosed to Notepad++, and a [...]

WhatsApp Secret Code Feature Lets Users Set Unique Locked Chat Passwords

1 December 2023

WhatsApp has announced the rollout of a new feature to safeguard sensitive conversations. The Secret Code feature provides additional protection to ensure users’ private conversations remain secure and protected from [...]

SSNDOB Marketplace Admin Jailed for Selling millions of Americans Data

30 November 2023

In a resounding triumph for justice, U.S. District Judge Kathryn Kimball Mizelle has sentenced Vitalii Chychasov, a 37-year-old Ukrainian citizen, to an eight-year federal prison term. Chychasov played a pivotal [...]

Is Your Online Store Hacked in a Carding Attack? Here’s an Action Plan to Protect

30 November 2023

Hackers are plotting to benefit from the generosity of Halloween, Thanksgiving, and Christmas shoppers using carding attacks as we gear up for the holiday season shopping. Online companies selling products [...]

Google Researchers Find Out How ChatGPT Queries Can Collect Personal Data

30 November 2023

The LLMs (Large Language Models) are evolving rapidly with continuous advancements in their research and applications. However, this progress also attracts threat actors who actively exploit LLMs for various malicious [...]

New Android Malware Employs Various Tactics to Deceive Malware Analyst

30 November 2023

In the dynamic realm of mobile application security, cybercriminals employ ever more sophisticated forms of malware, with code obfuscation standing out as a deceptive technique. This method intentionally distorts code [...]

DJvu Ransomware Mimic as Cracked Software to Compromise Computers

30 November 2023

A recent campaign has been observed to be delivering DJvu ransomware through a loader that pretends to be freeware or cracked software. This ransomware has been previously reported to provide [...]

Your Laptop’s Fingerprint Lock Can Be Hacked. How Hackers Exploit Fingerprint Sensors Flaws

22 November 2023

Multiple vulnerabilities have been found in the fingerprint sensors of Dell Inspiron 15, Lenovo ThinkPad T14, and Microsoft Surface Pro X laptops, which can be exploited to bypass Windows HelloRead [...]

6 Steps to File Anonymous SEC Complaints Against Data Breachers & Force Them to Pay Fines or Take Action

17 November 2023

The U.S. Securities and Exchange Commission (SEC) has guidelines and rules that relate to how publicly traded companies must handle and disclose data breaches. These rules are primarily focused onRead [...]

Inside the Exploit: How Your ChatGPT’s Uploaded Files Could Be Stolen by Prompt Injection Vulnerability

16 November 2023

In a startling revelation, ChatGPT, the advanced AI chatbot developed by OpenAI, has been found to have a significant security vulnerability. The discovery, first reported by renowned security researcher JohannRead [...]

This Atlassian Confluence Server backdoor will add malware in every page and can’t be removed

10 November 2023

CVE-2023-22515 and CVE-2023-22518 are critical vulnerabilities found in Atlassian Confluence, a widely used team collaboration software. CVE-2023-22515 CVE-2023-22518 These vulnerabilities can be particularly dangerous as they can be exploited toRead [...]

This Google Calendar technique allows to hack into companies without getting detected

7 November 2023

Google has warned about a method by which hackers could exploit its Calendar service to create a covert Command-and-Control (C2) channel. The technique involves using Google Calendar Events for C2Read [...]

RSA-2048 Shattered:Experts decrypt RSA-2048 with a Cellphone

3 November 2023

RSA-2048 is a widely used encryption scheme based on the RSA (Rivest–Shamir–Adleman) cryptosystem. The “2048” in RSA-2048 denotes the key size used for the encryption, which is 2048 bits long.Read [...]

Hijacked Data:LockBit Ransomware Gang Targets Aerospace Giant Boeing

30 October 2023

It would seem that the global leader in aerospace, Boeing, is the most recent victim of the ransomware gang known as LockBit, which has ties to Russia.On Friday, the gangRead [...]

North Korean Hackers Unveiled: Inside Their CI/CD Software Hacking Secrets

27 October 2023

In recent weeks, the renowned Lazarus gang, which acts as a cyber threat actor, has been more active than usual, exploiting software vulnerabilities in order to gain control of computers.Read [...]

Timeless Targets: After Casio, Seiko Group hacked again by Ransomware gang

25 October 2023

The Seiko Group, known for its timekeeping business, suffered a ransomware attack in July 2023 that led to the theft of around 60,000 items of personal data. The attackers, knownRead [...]

Unveiled: The Masterminds Behind Spain’s Largest Data Heist Arrested

24 October 2023

The Spanish National Police have successfully dismantled a sophisticated cybercriminal organization, resulting in the arrest of 34 individuals. This organization was involved in a multitude of computer scams, ultimately stealingRead [...]

Unlocked Doors: The Inside Story of Casio’s Global Data Breach!

20 October 2023

The recent Casio hack has left a significant impact on the data security of individuals and organizations across 149 countries. The breach specifically targeted the ClassPad education platform, which CasioRead [...]

Heimdal Collaborates with Microsoft to Match Evolving Market Needs

28 November 2023

Heimdal in partnership with Microsoft is addressing the needs of our customers and managed service providers through an advanced Next-Gen Antivirus (NGAV) upgrade. By leveraging Microsoft Defender and enhancing it [...]

FBI Warns: Scattered Spider Forms Alliance with Black Cat Ransomware

24 November 2023

Scattered Spider, a notorious cybercriminal group, has recently upgraded its tactics by incorporating BlackCat ransomware into its operations. The announcement comes from CISA and the FBI, who issued a joint [...]

CyberLink Breached by North Korean Threat Actors in Supply Chain Attack

24 November 2023

Notorious North Korean hacking group, Lazarus, breached Taiwanese multimedia software company CyberLink and trojanized an installer to instead push malware in a complex supply chain attack, with the possibility of [...]

Welltok Data Breach Affects Over 8.5 Million Patients

23 November 2023

Welltok, a Healthcare SaaS provider, has issued a warning about a significant data breach that compromised the personal information of nearly 8.5 million patients in the U.S. This breach occurred [...]

Patch Management Guide

23 November 2023

Patch management involves distributing and applying updates to various endpoints, which is crucial in fixing software vulnerabilities or unforeseen system interactions. 60% of cyber incidents leading to covert data theft [...]

Privileged Access Management – An Insider’s Fast-Forward Guide

23 November 2023

Privileged Access Management is a cybersecurity instrument that any safety-oriented company should have. Use it right and it will help you keep the company’s data and assets safe. You’re up [...]

What Is DNS Security and How Does It Work [A Comprehensive Guide]

22 November 2023

The cybersecurity solution of the future must be proactive and holistic, designed to face the most modern forms of attack. This is what we here at Heimdal are devoted to [...]

Mac Systems Under Threat: ClearFake Campaign Deploys Atomic Stealer Malware

22 November 2023

Threat actors target macOS systems with the Atomic Stealer malware in a new phase of the ClearFake campaign. Mac users are tricked into downloading the infostealer on their devices from [...]

Researchers Warn NetSupport RAT Attacks Are on the Rise

22 November 2023

Researchers warn of an increase in NetSupport RAT (Remote Access Trojan) infections impacting education, government, and business services sectors. NetSupport Manager is a remote control and desktop management tool by [...]

Vulnerability Prioritization: How to Beat Patching Paralysis

22 November 2023

Key Takeaways: Vulnerability prioritization is about deciding what to patch, and in what order. Many organizations use unsatisfactory methods when prioritizing patches. Learn how a holistic, risk-based approach to vulnerability [...]

How to Create a Cybersecurity Incident Response Plan?

21 November 2023

Organizations that want to avoid a security breach or attack naturally do everything in their power to avoid it from happening in the first place. The more proactive and preventative [...]

How to Conduct a Cybersecurity Risk Assessment (2023)

21 November 2023

A cybersecurity risk assessment is a process organizations go through to identify, categorize, and respond to security risks. This could include unpatched vulnerabilities, poor access controls, phishing – and much [...]

How to Conduct a Successful Privileged Access Management Audit

17 November 2023

As we’ve already established in our previous article, the ‘privilege overreach’ phenomenon can pose a serious security risk, which could lead to data breaches, operational downtime, and financial losses. This [...]

How to Assign User Privileges in Heimdal [It’s Easy] 

17 November 2023

Managing user privileges is a critical task for any organization. This article aims to guide you through the process of assigning user privileges in Heimdal, ensuring a secure and efficient [...]

The Challenges of Adopting ISO 27001 Controls: A Comprehensive Guide for CISOs and IT Administrators

17 November 2023

When it comes to information security, ISO 27001 is of paramount importance. As CISOs and IT administrators, you’re likely familiar with its significance. However, the journey from understanding to effectively [...]

Go Ninja - 4,999,001 breached accounts

30 November 2023

In December 2019, the now defunct German gaming website Go Ninja suffered a data breach that exposed 5M unique email addresses. The impacted data included usernames, email and IP addresses [...]

Estante Virtual - 5,412,603 breached accounts

29 November 2023

In February 2019, the Brazilian book store Estante Virtual suffered a data breach that impacted 5.4M customers. The exposed data included names, usernames, email and physical addresses, phone numbers, dates [...]

Bleach Anime Forum - 143,711 breached accounts

29 November 2023

In 2015, the now defunct independent forum for the Bleach Anime series suffered a data breach that exposed 144k user records. The impacted data included usernames, email addresses and salted [...]

IndiHome - 12,629,245 breached accounts

27 November 2023

In mid-2021, reports emerged of a data breach of Indonesia's telecommunications company, IndiHome. Over 26M rows of data alleged to have been sourced from the company was posted to a [...]

Jam Tangan - 434,784 breached accounts

27 November 2023

In July 2021, the online Indonesian watch store, Jam Tangan (AKA Machtwatch), suffered a data breach that exposed over 400k customer records which were subsequently posted to a popular hacking [...]

KitchenPal - 98,726 breached accounts

24 November 2023

In November 2023, the kitchen management application KitchenPal suffered a data breach that exposed 146k lines of data. When contacted about the incident, KitchenPal advised the corpus of data came [...]

OMGPOP - 7,071,293 breached accounts

20 November 2023

In approximately 2013, the maker of the Draw Something game OMGPOP suffered a data breach. Formerly known as i'minlikewithyou or iilwy and later purchased by Zynga, the breach exposed over [...]

Acuity - 14,055,729 breached accounts

15 November 2023

In mid-2020, a 437GB corpus of data attributed to an entity named "Acuity" was created and later extensively distributed. However, the source could not be confidently verified as any known [...]

Avito - 2,721,835 breached accounts

14 November 2023

In November 2022, the Moroccan e-commerce service Avito suffered a data breach that exposed the personal information of 2.7M customers. The data included name, email, phone, IP address and geographic [...]

Chess - 827,620 breached accounts

10 November 2023

In November 2023, over 800k user records were scraped from the Chess website and posted to a popular hacking forum. The data included email address, name, username and the geographic [...]

LinkedIn Scraped and Faked Data (2023) - 19,788,753 breached accounts

7 November 2023

In November 2023, a post to a popular hacking forum alleged that millions of LinkedIn records had been scraped and leaked. On investigation, the data turned out to be a [...]

GamingMonk - 654,510 breached accounts

5 November 2023

In December 2020, India's "largest esports community" GamingMonk (since acquired by and redirected to MPL Esports), suffered a data breach. The incident exposed 655k unique email addresses along with names, [...]

Fitmart - 214,492 breached accounts

3 November 2023

In October 2021, data from the German fitness supplies store Fitmart was obtained and later redistributed online. The data included 214k unique email addresses accompanied by plain text passwords, allegedly [...]

GameSprite - 6,164,643 breached accounts

30 October 2023

In December 2019, the now defunct gaming platform GameSprite suffered a data breach that exposed over 6M unique email addresses. The impacted data also included usernames, IP addresses and salted [...]

MemeChat - 4,348,570 breached accounts

29 October 2023

In mid-2022, "the ultimate hub of memes" MemeChat suffered a data breach that exposed 7.4M records. Alleged to be due to a misconfigured Elasticsearch instance, the data contained 4.3M unique [...]

Toumei - 76,682 breached accounts

27 October 2023

In October 2023, the Japanese consultancy firm Toumei suffered a data breach. The breach exposed over 100M lines and 10GB of data including 77k unique email addresses along with names, [...]

Tunngle - 8,192,928 breached accounts

21 October 2023

In 2016, the now defunct global LAN gaming network Tunngle suffered a data breach that exposed 8.2M unique email addresses. The compromised data also included usernames, IP addresses and passwords [...]

Sphero - 832,255 breached accounts

20 October 2023

In September 2023, over 1M rows of data from the educational robots company Sphero was posted to a popular hacking forum. The data contained 832k unique email addresses alongside names, [...]

AndroidLista - 6,640,643 breached accounts

17 October 2023

In July 2021, the Android applications and games review site AndroidLista suffered a data breach. The incident exposed 6.6M user records containing email addresses, names, usernames and passwords stored as [...]

Phoenix - 74,776 breached accounts

17 October 2023

In mid-2021, the "vintage messaging reborn" service Phoenix suffered a data breach that exposed 75k unique email addresses. The breach also exposed IP addresses, usernames and passwords. [...]