News

ScrubCrypt Deployed to Distribute VenomRAT and Powerful Array of Malware

• Cyber Security
• Malware

ScrubCrypt Deployed to Distribute VenomRAT and Powerful Array of Malware

Do Son April 8, 2024 0

In a recent analysis, FortiGuard Labs exposed a complex cyberattack campaign meticulously designed to infect victims with...

Read More Read more about ScrubCrypt Deployed to Distribute VenomRAT and Powerful Array of Malware

CData Products Targeted: Path Traversal Vulnerability Opens Door to Sensitive Data

• Vulnerability

CData Products Targeted: Path Traversal Vulnerability Opens Door to Sensitive Data

Do Son April 7, 2024 0

A newly uncovered path traversal vulnerability in the Java-based deployments of several CData business integration products poses...

Read More Read more about CData Products Targeted: Path Traversal Vulnerability Opens Door to Sensitive Data

MuddyWater Strikes Again: New ‘DarkBeatC2’ Framework Targets Israel

• Cyber Security
• Malware

MuddyWater Strikes Again: New ‘DarkBeatC2’ Framework Targets Israel

Do Son April 7, 2024 0

Deep Instinct’s Threat Research team has uncovered a sophisticated campaign spearheaded by MuddyWater, an entity known for...

Read More Read more about MuddyWater Strikes Again: New ‘DarkBeatC2’ Framework Targets Israel

Latin America Under Siege: Phishers Weaponize Fake Suspended Domains

• Cyber Security
• Malware

Latin America Under Siege: Phishers Weaponize Fake Suspended Domains

Do Son April 7, 2024 0

Latin American businesses and individuals, beware! An orchestrated phishing scheme has surfaced, exploiting the illusion of suspended...

Read More Read more about Latin America Under Siege: Phishers Weaponize Fake Suspended Domains

Cybercriminals Hijack AI Hype to Spread Malware in Deceptive Social Media Campaigns

• Cyber Security
• Malware

Cybercriminals Hijack AI Hype to Spread Malware in Deceptive Social Media Campaigns

Do Son April 7, 2024 0

In a disturbing trend uncovered by Bitdefender Labs, malicious actors are weaponizing the growing fascination with AI...

Read More Read more about Cybercriminals Hijack AI Hype to Spread Malware in Deceptive Social Media Campaigns

Watch Out for Latrodectus: New Malware from Suspected IcedID Developers Targeting Businesses

• Cyber Security
• Malware

Watch Out for Latrodectus: New Malware from Suspected IcedID Developers Targeting Businesses

Do Son April 7, 2024 0

In a joint report by Proofpoint’s Threat Research team and Team Cymru, a potent new malware dubbed...

Read More Read more about Watch Out for Latrodectus: New Malware from Suspected IcedID Developers Targeting Businesses

Financial Institutions in Asia and Middle East Hit by Evolving JSOutProx Malware Campaign

• Cyber Security
• Malware

Financial Institutions in Asia and Middle East Hit by Evolving JSOutProx Malware Campaign

Do Son April 7, 2024 0

A dangerous new wave of attacks employing a revamped version of the JSOutProx remote access trojan (RAT)...

Read More Read more about Financial Institutions in Asia and Middle East Hit by Evolving JSOutProx Malware Campaign

CVE-2023-3454: Critical Vulnerability in Brocade Fabric OS Exposes Networks to Remote Attacks

• Vulnerability

CVE-2023-3454: Critical Vulnerability in Brocade Fabric OS Exposes Networks to Remote Attacks

Do Son April 6, 2024 0

A serious vulnerability has been uncovered in Brocade Fabric OS, the firmware used by popular Fibre Channel...

Read More Read more about CVE-2023-3454: Critical Vulnerability in Brocade Fabric OS Exposes Networks to Remote Attacks

Urgent Security Patch Released for Dell Servers: CVE-2024-0172 Could Allow Hackers to Take Control

• Vulnerability

Urgent Security Patch Released for Dell Servers: CVE-2024-0172 Could Allow Hackers to Take Control

Do Son April 5, 2024 0

Dell has released a critical security patch addressing a severe vulnerability (CVE-2024-0172) in the BIOS software used...

Read More Read more about Urgent Security Patch Released for Dell Servers: CVE-2024-0172 Could Allow Hackers to Take Control

Stealthy XML Backdoor Haunts Magento Stores – New Threat Exploits Critical Vulnerability (CVE-2024-20720)

• Vulnerability

Stealthy XML Backdoor Haunts Magento Stores – New Threat Exploits Critical Vulnerability (CVE-2024-20720)

Do Son April 5, 2024 0

Magento merchants, brace yourselves. A cunning new malware campaign is targeting your online stores with an insidious...

Read More Read more about Stealthy XML Backdoor Haunts Magento Stores – New Threat Exploits Critical Vulnerability (CVE-2024-20720)

QlikView Patches High Severity Privilege Escalation Vulnerability (CVE-2024-29863)

• Vulnerability

QlikView Patches High Severity Privilege Escalation Vulnerability (CVE-2024-29863)

Do Son April 5, 2024 0

Qlik, the popular business intelligence software vendor, has released urgent security patches to address a critical vulnerability...

Read More Read more about QlikView Patches High Severity Privilege Escalation Vulnerability (CVE-2024-29863)

CVE-2024-3116: Critical pgAdmin Vulnerability Exposes Databases to Remote Attacks

• Vulnerability

CVE-2024-3116: Critical pgAdmin Vulnerability Exposes Databases to Remote Attacks

Do Son April 5, 2024 0

A severe security flaw has been uncovered in pgAdmin, the popular open-source tool used by database administrators...

Read More Read more about CVE-2024-3116: Critical pgAdmin Vulnerability Exposes Databases to Remote Attacks

CoralRaider: Vietnamese Hackers Wage Stealthy Campaign, Targeting Social Media and Financial Data

• Cyber Security
• Malware

CoralRaider: Vietnamese Hackers Wage Stealthy Campaign, Targeting Social Media and Financial Data

Do Son April 4, 2024 0

Researchers at Cisco Talos have uncovered a sophisticated cybercrime operation dubbed “CoralRaider,” pinpointing the threat actors as...

Read More Read more about CoralRaider: Vietnamese Hackers Wage Stealthy Campaign, Targeting Social Media and Financial Data

Byakugan Malware: Multi-Faceted Threat Targets User Data, Evades Detection

• Malware

Byakugan Malware: Multi-Faceted Threat Targets User Data, Evades Detection

Do Son April 4, 2024 0

Researchers at FortiGuard Labs have uncovered the inner workings of Byakugan, a versatile malware strain employing a...

Read More Read more about Byakugan Malware: Multi-Faceted Threat Targets User Data, Evades Detection

YubiKey Manager Flaw (CVE-2024-31498): Patch Now To Prevent Admin Privilege Escalation on Windows

• Vulnerability

YubiKey Manager Flaw (CVE-2024-31498): Patch Now To Prevent Admin Privilege Escalation on Windows

Do Son April 4, 2024 0

Yubico has released a security advisory and patch (version 1.2.6) for its YubiKey Manager GUI software. A...

Read More Read more about YubiKey Manager Flaw (CVE-2024-31498): Patch Now To Prevent Admin Privilege Escalation on Windows

QakBot Returns with Evasive Tactics, Posing Renewed Threat

• Malware

QakBot Returns with Evasive Tactics, Posing Renewed Threat

Do Son April 4, 2024 0

Thought to be neutralized last year, the notorious QakBot malware has re-emerged with updated techniques designed to...

Read More Read more about QakBot Returns with Evasive Tactics, Posing Renewed Threat

Apache CloudStack Releases Critical Security Patches – Update Immediately

• Vulnerability

Apache CloudStack Releases Critical Security Patches – Update Immediately

Do Son April 4, 2024 0

The Apache Software Foundation has issued security releases 4.18.1.1 and 4.19.0.1 for its popular cloud management platform,...

Read More Read more about Apache CloudStack Releases Critical Security Patches – Update Immediately

NordVPN Impersonators Exploit Bing Ads to Spread SecTopRAT Malware

• Malware

NordVPN Impersonators Exploit Bing Ads to Spread SecTopRAT Malware

Do Son April 4, 2024 0

In yet another instance highlighting the dangers of malvertising, the popular VPN service NordVPN has become the...

Read More Read more about NordVPN Impersonators Exploit Bing Ads to Spread SecTopRAT Malware

Unpatched Vulnerabilities: Ransomware’s Favorite Entry Point

• Cyber Security
• Malware
• Vulnerability

Unpatched Vulnerabilities: Ransomware’s Favorite Entry Point

Do Son April 4, 2024 0

A recent report by Sophos, based on a comprehensive survey conducted by Vanson Bourne, sheds light on...

Read More Read more about Unpatched Vulnerabilities: Ransomware’s Favorite Entry Point

Apache HTTP Server Hit by Triple Vulnerabilities – Users Urged to Update

• Vulnerability

Apache HTTP Server Hit by Triple Vulnerabilities – Users Urged to Update

Do Son April 4, 2024 0

Security researchers have uncovered three vulnerabilities in the widely used Apache HTTP Server, prompting an urgent call...

Read More Read more about Apache HTTP Server Hit by Triple Vulnerabilities – Users Urged to Update

CVE-2024-3273: D-Link NAS Vulnerability Threatens 92,000 Devices

• Vulnerability

CVE-2024-3273: D-Link NAS Vulnerability Threatens 92,000 Devices

Do Son April 3, 2024 0

Security researchers have uncovered a serious vulnerability in several D-Link Network Attached Storage (NAS) devices, including DNS-320L,...

Read More Read more about CVE-2024-3273: D-Link NAS Vulnerability Threatens 92,000 Devices

Node.js Security Update Addresses Server Crash, Request Smuggling Vulnerabilities

• Vulnerability

Node.js Security Update Addresses Server Crash, Request Smuggling Vulnerabilities

Do Son April 3, 2024 0

The Node.js project has released a critical security update addressing vulnerabilities in active release lines (v18.x, v20.x,...

Read More Read more about Node.js Security Update Addresses Server Crash, Request Smuggling Vulnerabilities