CVE/vulnerability
Juniper SRX Vulnerability Allows Attackers Trigger DoS Condition
A vulnerability in Junos OS on SRX Series devices allows attackers to trigger a DoS attack by sending crafted valid traffic, which is caused...
CVE/vulnerability
New North Korean Actor Distributing Malicious npm Packages To Compromise Organizations
Early in 2024, North Korean threat actors persisted in using the public npm registry to disseminate malicious packages that were similar to those that...
Cyber Attack
Stuxnet, The Malware That Propagates To Air-Gapped Networks
Stuxnet, a complex worm discovered in 2010, targeted Supervisory Control and Data Acquisition (SCADA) systems used in industrial facilities.
By exploiting multiple vulnerabilities, including...
CVE/vulnerability
SolarWinds Serv-U Vulnerability Let Attackers Access sensitive files
SolarWinds released a security advisory for addressing a Directory Traversal vulnerability which allows a threat actor to read sensitive files on the host machine.
This...
CVE/vulnerability
Muhstik Malware Attacking Apache RocketMQ To Execute Remote Code
Apache RocketMQ platform is a widely used messaging system that handles high volumes of data and critical operations, often attracting hackers.Â
Exploiting the vulnerabilities in...
CVE/vulnerability
NSA Releases Guidance On Zero Trust Maturity To Secure Application From Attackers
Zero Trust Maturity measures the extent to which an organization has adopted and implemented the Zero Trust security model.Â
It calculates how fully a company...
CVE/vulnerability
Chinese Hackers Stay Hidden On Military And Government Networks For Six Years
Hackers target military and government networks for varied reasons, primarily related to spying, which involves interference in the functioning of critical infrastructure.
This is mainly...
CVE/vulnerability
DNSBomb : A New DoS Attack That Exploits DNS Queries
A new practical and powerful Denial of service attack has been discovered that exploits DNS queries and responses.
This new attack has been termed...