.webp "Microsoft .NET, .NET Framework, & Visual Studio Vulnerable To RCE Attacks")
.webp "LightSpy Hackers Indian Apple Device Users to Steal Sensitive Data")
Red Menshen APT Group Deploying BPFDoor in Linux Kernel
APTs Red Menshen expands targets to Linux and cloud servers, as seen in ransomware attacks on VMware ESXi, Mirai botnet variations, and cloud-focused stealers...
Rockwell Automation ControlLogix Flaws Expose ICS Devices to RCE & DoS Attacks
Rockwell Automation ControlLogix EtherNet/IP (ENIP) communication module models have two security issues that might be utilized to carry out remote code execution and cause a...
Re-released Apple WebKit Zero-Day Patch Fixes Website Breaking
Apple has recently released new Rapid Security Response (RSR) patches to fix a zero-day vulnerability. This vulnerability has been exploited in attacks and affects...
Malicious Chrome Extension Steals Businesses Ads Manager Login Details
Cybercriminals are using malicious Chrome extensions to steal Facebook login information in a recent operation.The reports shared by Malwarebytes Labs also stated that sponsored...
Jenkins Plugin Flaw Lets Attackers Gain Admin Access
A recent security advisory from Jenkins reported that they had fixed 24 vulnerabilities affecting multiple Jenkins plugins.This Flaw includes 5 High, 18 Medium,...
SonicWall Critical Flaws Let Attackers Bypass Authentication
SonicWall has recently published a security notice in which 15 vulnerabilities were fixed.CVEs for these vulnerabilities have been published, and patches for 4...
OWASP ZAP 2.13.0 Released – What’s New!
The OWASP Zed Attack Proxy is a widely used tool for conducting web application penetration testing. It is free and open-source.ZAP functions as a...
Hackers Leverage USB Flash Drives to Attack Public and Private Sectors Globally
During the initial half of 2023, a notable surge occurred in attacks exploiting infected USB drives for secret theft.While the USB-based operation campaigns caused...
New Research Reveals APT Groups Targeting Security Researchers
As per the research conducted by SentinelOne, a new risk has been identified, which affects the information security researchers as well as the infosec...
Hackers Actively Exploit Unpatched Office Zero-Day Flaw in the Wild
Storm-0978, a threat actor, actively targeted European and North American defense and government entities in a phishing campaign.Exploiting CVE-2023-36884, the campaign used Word documents...
Managed WAF protection
.webp "LightSpy Malware Attacking Android and iOS Users")