Do Son Uncover a powerful new DCOM lateral movement attack: the DCOM Upload & Execute technique. Learn how attackers exploit DCOM interfaces for remote code execution.
Over 15,000 Sites at Risk: Woffice WordPress Theme Vulnerabilities Could Lead to Full Site Takeovers
Over 15,000 Sites at Risk: Woffice WordPress Theme Vulnerabilities Could Lead to Full Site Takeovers
Discover the critical vulnerabilities in the Woffice WordPress theme, rated at CVSS 9.8 severity. Learn how unauthenticated users can register with any role, posing a security risk.
Discover the hidden cybersecurity risks of Microsoft UI Automation. Learn how attackers can exploit this framework to bypass modern EDR systems and exfiltrate sensitive data.
The internet is one of the marvels of the century. It allows us to stay connected at...
Stay secure with Dell's critical security update addressing multiple vulnerabilities. Understand the risks posed by CVE-2024-37143 and CVE-2024-37144.
Learn about the critical vulnerability in PDQ Deploy highlighted by CERT/CC. Find out how this flaw can expose organizations to network compromises.
Discover the latest cybersecurity threats to Citrix NetScaler devices and how to strengthen your defenses against brute-force attacks.
Find out about the high-severity vulnerability CVE-2024-55633 in Apache Superset, allowing attackers to bypass read-only restrictions and modify data.
Uncover the sophisticated Android spyware BoneSpy and PlainGnome, attributed to the Russian APT group Gamaredon. Learn about their surveillance capabilities and the link to the Russian Federal Security Service (FSB).
Uncover the severe WordPress vulnerability, CVE-2024-11972, allowing attackers to bypass permission checks and install plugins directly from the repository.
Unveiling a sophisticated cyber campaign targeting high-profile organizations in Southeast Asia. Discover the tactics and tools used by this China-based attacker.
Discover a sophisticated modular Java-based RAT deployed in a multi-stage attack targeting Cleo file transfer software.
14 North Korean operatives indicted for an extensive series of international cyber schemes. Find out how they defrauded organizations and funneled millions for the North Korean regime.
Get insights into a large-scale phishing campaign targeting employees across 30 companies. Uncover the techniques used by threat actors to evade detection and deceive victims.
Learn about the takedown of Rydox, a notorious online marketplace for stolen personal information and cybercrime tools.
Learn about the targeted attack by APT-C-60 on a Japanese organization in 2024, using legitimate services and evasive tactics.
Dan Agbo
This article is the first part of a series of publications by a recognised and experienced frontend...
Law enforcement strikes a blow against DDoS-for-hire platforms. Read about Operation PowerOFF and the dismantling of cybercriminal networks.
Uncover the secrets of EagleMsgSpy, a powerful surveillance tool used by law enforcement agencies in China. Find out how it extracts sensitive information from mobile devices.
Urgent security update for Apache Struts users: Critical vulnerability (CVE-2024-53677) allows remote code execution. Update now to protect your systems.
A security researcher from watchTowr published the technical detail and a PoC exploit code for CVE-2024-50623 – a Cleo zero-day RCE flaw
Uncover the aggressive tactics of the 'Aggressive Inventory Zombies' cybercrime campaign targeting retail brands and cryptocurrency users.