Latest news
The first vulnerability, tagged as CVE-2023-46149 with a CVSS score of 9.8, exposes a terrifying reality: Authenticated Arbitrary File Upload
On the 12th of December 2023, SAP Security Patch Day published 15 new Security Notes alongside updates to 2 previously released notes
Approximately 55% of these insider threat incidents involved the unauthorized use or attempted use of privilege escalation exploits
CVE-2023-6186 affects LibreOffice on all platforms and allows attackers to execute malicious scripts by crafting specially crafted hyperlinks
Sandman APT, identified as likely being China-based, is intricately linked to known threat clusters, including STORM-0866/Red Dev 40
This vulnerability, known as CVE-2023-6553 (CVSS 9.8), impacts the Backup Migration plugin used by over 90,000 websites.
The ELECTRUM threat group targeted a Ukrainian electric substation, gaining access through an end-of-life version of MicroSCADA software
AsyncRAT reveals the evolving tactics of adversaries. It exploits aspnet_compiler.exe, intended for precompiling ASP.NET web applications
The recently sensationalized Bitcoin inscriptions have been reported as a cybersecurity vulnerability, designated as CVE-2023-50428
PoC exploit code is about to be published for the zero-day CVE-2023-36036 vulnerability that allows hackers to gain SYSTEM privileges
CVE-2023-6248 could allow attackers to remotely take control of fleets of vehicles, potentially leading to widespread chaos
CVE-2023-48777 allows accounts with edit post permissions, such as those with the Contributor role, to upload potentially malicious files
CVE-2023-35618 could lead to browser sandbox escape, allowing attackers to host or use compromised websites to exploit the vulnerability
This vulnerability cataloged as CVE-2023-49897 with a CVSS v3 score of 8.0, allows authenticated attackers to execute OS commands remotely
the cyber threat landscape is continually evolving, with sophisticated threat groups like Scattered Spider emerging as significant players
The Russia-based threat group known as Star Blizzard has been operating in the shadows, launching sophisticated spear-phishing attacks
The activities of Fighting Ursa, or APT28, underscore the evolving landscape of cyber threats and the necessity for constant vigilance
MrAnon Stealer, a Python-based information stealer, is adept at evading detection, thanks to its compression with cx-Freeze.
PALIG announced that it was impacted by a widespread data security incident involving Progress Software’s MOVEit Transfer software
Apache Struts is facing a critical vulnerability (CVE-2023-50164) that can allow attackers to execute arbitrary code remotely.