Daily CyberSecurity

Hanwha Vision Announces Critical Security Updates for NVR and DVR Models

• Vulnerability

Hanwha Vision Announces Critical Security Updates for NVR and DVR Models

Do Son April 26, 2024 0

CVE-2023-6095, CVE-2023-6096 & CVE-2023-6116 could potentially allow unauthorized remote code execution and compromise device security.

Alert: “Brokewell” Malware – New Threat Targets Bank Users with Remote Device Takeover

• Cyber Security
• Malware

Alert: “Brokewell” Malware – New Threat Targets Bank Users with Remote Device Takeover

Do Son April 25, 2024 0

During their investigation, ThreatFabric identified a new actor in the Brokewell mobile malware arena—dubbed "Baron Samedit."

Skylab IGX IIoT Gateway Vulnerability (CVE-2024-4163): Root Access for Attackers

• Vulnerability

Skylab IGX IIoT Gateway Vulnerability (CVE-2024-4163): Root Access for Attackers

Do Son April 25, 2024 0

CVE-2024-4163 allows attackers to escalate their privileges and potentially take complete control of the affected devices

Thousands of API Secrets Exposed on Postman – Are Your Credentials At Risk?

• Data Leak

Thousands of API Secrets Exposed on Postman – Are Your Credentials At Risk?

Do Son April 25, 2024 0

thousands of live API keys, authentication tokens, and sensitive data are readily accessible on Postman's Public API Network

Iranian Hacker Group MuddyWater Abuses Legitimate Atera Software to Target Global Organizations

• Cyber Security
• Malware

Iranian Hacker Group MuddyWater Abuses Legitimate Atera Software to Target Global Organizations

Do Son April 25, 2024 0

MuddyWater, an Iranian state-backed hacking group, is exploiting the legitimate remote monitoring and management (RMM) solution

Hackers Employ Advanced Fileless Attack to Implant AgentTesla Malware

• Malware

Hackers Employ Advanced Fileless Attack to Implant AgentTesla Malware

Do Son April 25, 2024 0

Threat research team has recently uncovered sophisticated .NET managed code injection methods employed by the notorious AgentTesla malware

PoC Exploit Releases for Critical Progress Flowmon Bug – CVE-2024-2389 (CVSS 10)

• Vulnerability

PoC Exploit Releases for Critical Progress Flowmon Bug – CVE-2024-2389 (CVSS 10)

Do Son April 25, 2024 0

Rhino Security Labs has not only disclosed the CVE-2024-2389 vulnerability but has also provided a proof of concept (PoC)

AI Powers a Phishing Frenzy – Zscaler Report Warns of Unprecedented Threat Wave

• Cyber Security

AI Powers a Phishing Frenzy – Zscaler Report Warns of Unprecedented Threat Wave

Do Son April 25, 2024 0

Zscaler ThreatLabz released its 2024 Phishing Report, revealing a disturbing evolution in phishing tactics fueled by generative AI technologies

Beware of Search Results: Hackers Using Fake Websites to Spread Malware

• Cyber Security
• Malware

Beware of Search Results: Hackers Using Fake Websites to Spread Malware

Do Son April 25, 2024 0

Security experts have revealed a widespread campaign where hackers are hijacking legitimate web hosting platforms to distribute dangerous malware

Cisco Zero-Day Exploit Code Goes Public: Patch Now or Face Total System Takeover

• Vulnerability

Cisco Zero-Day Exploit Code Goes Public: Patch Now or Face Total System Takeover

Do Son April 25, 2024 0

The situation escalated when a security researcher known as W01fh4cker released a proof-of-concept (PoC) exploit code for CVE-2023-20198

Cactus Ransomware Targets Qlik Sense Servers

• Cyber Security
• Malware
• Vulnerability

Cactus Ransomware Targets Qlik Sense Servers

Do Son April 25, 2024 0

A public-private partnership in the Netherlands has revealed critical information about a dangerous ransomware group dubbed Cactus

Critical Judge0 Flaws Expose Online Coding Platforms to Full System Takeovers

• Vulnerability

Critical Judge0 Flaws Expose Online Coding Platforms to Full System Takeovers

Do Son April 24, 2024 0

CVE-2024-29021, CVE-2024-28185, CVE-2024-28189 affecting Judge0 versions 1.13.0 and earlier have the potential to lead to complete system compromises

CISA Added Critical Vulnerabilities in Cisco Products and CrushFTP to KEV

• Vulnerability

CISA Added Critical Vulnerabilities in Cisco Products and CrushFTP to KEV

Do Son April 24, 2024 0

The revelation that a state-backed hacking group has been exploiting two zero-day vulnerabilities (CVE-2024-20353, CVE-2024-20359)

From SideCopy to Transparent Tribe: Pakistan APTs Hit Indian Government With RATs

• Cyber Security
• Malware

From SideCopy to Transparent Tribe: Pakistan APTs Hit Indian Government With RATs

Do Son April 24, 2024 0

The report highlights a coordinated campaign waged by the notorious SideCopy and Transparent Tribe (APT36) groups

Urgent GitLab Update Patches Account Takeover Flaw, Other High-Severity Bugs

• Vulnerability

Urgent GitLab Update Patches Account Takeover Flaw, Other High-Severity Bugs

Do Son April 24, 2024 0

CVE-2024-4024: an attacker with stolen Bitbucket credentials could potentially take over a GitLab account linked to another user's Bitbucket account

DragonForce Ransomware: A Legacy Crafted from Leaked LOCKBIT Black Code

• Malware

DragonForce Ransomware: A Legacy Crafted from Leaked LOCKBIT Black Code

Do Son April 24, 2024 0

A new report from Cyble Research & Intelligence Labs (CRIL) has shed light on the origins of DragonForce, a dangerous ransomware strain

Nation-State Hackers Breach Cisco Devices in “ArcaneDoor” Espionage Campaign

• Cyber Security
• Vulnerability

Nation-State Hackers Breach Cisco Devices in “ArcaneDoor” Espionage Campaign

Do Son April 24, 2024 0

Cisco has identified two vulnerabilities that were abused in the ArcaneDoor campaign (CVE-2024-20353 and CVE-2024-20359).

Google Patches Critical Vulnerabilities in Chrome – Update Now!

• Vulnerability

Google Patches Critical Vulnerabilities in Chrome – Update Now!

Do Son April 24, 2024 0

CVE-2024-4058 (Critical): Type confusion vulnerability in ANGLE that could lead to arbitrary code execution

CVE-2023-27368: NETGEAR Nighthawk Series Routers Authentication Bypass Vulnerability

• Vulnerability

CVE-2023-27368: NETGEAR Nighthawk Series Routers Authentication Bypass Vulnerability

Do Son April 24, 2024 0

The vulnerability, labeled CVE-2023-27368 (CVSS 8.4), could allow hackers to completely bypass the router's login system

Your Keyboard May Be Spilling Your Secrets – Critical Flaws Expose Keystrokes of Millions

• Data Leak
• Vulnerability

Your Keyboard May Be Spilling Your Secrets – Critical Flaws Expose Keystrokes of Millions

Do Son April 23, 2024 0

popular Chinese keyboard apps transmit your keystrokes in ways that leave them shockingly vulnerable to interception

Critical Vulnerabilities in Popular Database Library Expose Millions of Applications to Attack

• Vulnerability

Critical Vulnerabilities in Popular Database Library Expose Millions of Applications to Attack

Do Son April 23, 2024 0

These vulnerabilities, CVE-2024-21508 and CVE-2024-21509, could have far-reaching consequences for organizations across industries.

Suspected CoralRaider Expands Attacks, Targets Diverse Victims with Triple-Threat Infostealer Campaign

• Cyber Security
• Malware

Suspected CoralRaider Expands Attacks, Targets Diverse Victims with Triple-Threat Infostealer Campaign

Do Son April 23, 2024 0

A sophisticated hacking group suspected to be the infamous CoralRaider is ramping up its attacks, using multiple well-known infostealers