Cyber Attack

ChatGPT-Next-Web SSRF Bug Let Hackers Gain Full Access to HTTP Endpoints

There are advantages to using standalone AI chatbots over cloud-based alternatives such as OpenAI; however, there are also some security…

1 year ago

Muddled Libra Hackers Using Pentesting Tools To Gain Admin Access

Threat actors use pentesting tools to identify vulnerabilities and weaknesses in target systems or networks. These tools provide a simulated…

1 year ago

WordPress Plugin Flaw Exposes 200,000+ Websites to XSS Attacks

Over 200,000 websites have been left vulnerable to Cross-Site Scripting (XSS) attacks due to a flaw in the Ultimate Member…

1 year ago

BianLian Hackers Hijacked TeamCity Servers To Install GO Backdoor

BianLian attackers exploited a TeamCity vulnerability (CVE-2024-27198 or CVE-2023-42793) to gain initial access and move laterally within the network.  They…

1 year ago

CyberGate RAT Mimic as Dorks Tool to Attack Cybersecurity Professionals

Threat actors target a niche group of internet users, security researchers, penetration testers, and even cybercriminals. The weapon of choice…

1 year ago

Chinese Panda APT Hacking Websites To Infect Windows And MacOS Users

Evasive Panda dubbed BRONZE HIGHLAND and Daggerfly, a Chinese-speaking APT group operating since at least 2012, has been spotted conducting cyberespionage…

1 year ago

100% Surge in Malicious Emails Bypassing Secure Email Gateways

The frequency of malicious emails successfully circumventing Secure Email Gateways (SEGs) has doubled in the past year. This surge highlights the evolving sophistication of cyber threats and the challenges organizations face in…

1 year ago

Server Killers Alliances: Here is the List of Hacker Groups

The hacker group known as Server Killers has announced their participation in a coordinated cyber attack on Moldova. This group…

1 year ago

Beware of New Snake Python Infostealer Attacking Facebook Messenger Users

A new menace has emerged targeting unsuspecting Facebook Messenger users. Dubbed the "Python Infostealer," this malicious software is designed to…

1 year ago

Project DDoSia – Russian Hackers Planning a Massive DDoS Attack

Hackers launch large-scale DDoS attacks to disrupt and make online services inaccessible, driven by motives like revenge or protest, flooding…

1 year ago