Wednesday, February 12, 2025

Cyber Security News

FortiOS & FortiProxy

FortiOS & FortiProxy Vulnerability Allows Attackers Firewall Hijacks to Gain Super Admin Access

0
A critical vulnerability in Fortinet's FortiOS and FortiProxy products has been identified, enabling attackers to bypass authentication and gain super-admin access.The flaw, classified...
DoS Attack

Fortinet’s FortiOS Vulnerabilities Allow Attackers Trigger RCE and Launch DoS Attack

0
Fortinet’s FortiOS, the operating system powering its VPN and firewall appliances, has been found vulnerable to multiple security flaws that could allow attackers to...

0-Day Vulnerability in Windows Storage Allow Hackers to Delete the Target Files Remotely

0
A newly discovered 0-day vulnerability in Windows Storage has sent shockwaves through the cybersecurity community.Identified as CVE-2025-21391, this critical flaw allows attackers to elevate privilege...
I2P Network

Ratatouille Malware Bypass UAC Control & Exploits I2P Network to Launch Cyber Attacks

0
A newly discovered malware, dubbed "Ratatouille" (or I2PRAT), is raising alarms in the cybersecurity community due to its sophisticated methods of bypassing User Account...
Sandworm APT Hackers

Sandworm APT Hackers Weaponize Microsoft KMS Activation Tools To Compromise Windows

0
In a sophisticated cyber-espionage operation, the Russian state-sponsored hacking group Sandworm (APT44), linked to the GRU (Russia's Main Intelligence Directorate), has been exploiting pirated...

Hackers Can Exploit “Wormable” Windows LDAP RCE Vulnerability for Remote Attacks

0
A critical new vulnerability in Microsoft’s Windows Lightweight Directory Access Protocol (LDAP), tagged as CVE-2025-21376, has recently come to light, raising alarms across global...

Google Chrome’s Safe Browsing Now Protects 1 Billion Users Worldwide

0
Google's Safe Browsing technology now ensures enhanced protection for over 1 billion Chrome users worldwide.Launched in 2005, Safe Browsing is a robust system designed...
SIEM as a Service

Recent News

IllusionCAPTCHA

Enhanced IllusionCAPTCHA: Advanced Protection Against AI-Powered CAPTCHA Attacks

0
As AI technologies continue to evolve, traditional CAPTCHA systems face increasing vulnerabilities.Recent studies reveal that advanced AI models, such as multimodal large language...
Exploit ASP.NET Machine Keys to hack IIS

Hackers Exploit 3,000 ASP.NET Machine Keys to Hack IIS Web Servers Remotely

0
Microsoft has raised alarms about a new cyber threat involving ViewState code injection attacks exploiting publicly disclosed ASP.NET machine keys to compromise ISS web...

Hackers Exploit AnyDesk Vulnerability to Gain Admin Access – PoC Released

0
A newly discovered vulnerability in AnyDesk, the popular remote desktop software, has sparked serious cybersecurity concerns.Identified as CVE-2024-12754 and tracked under ZDI-24-1711, this flaw...

Linux Kernel 6.14-rc2 Released – What’s Newly Added !

0
Linus Torvalds, lead developer of the Linux kernel, announced the second release candidate (rc2) of Linux Kernel 6.14, providing developers and enthusiasts with a...
Autonomous LLMs

Autonomous LLMs Reshaping Pen Testing: Real-World AD Breaches and the Future of Cybersecurity

0
Large Language Models (LLMs) are transforming penetration testing (pen testing), leveraging their advanced reasoning and automation capabilities to simulate sophisticated cyberattacks.Recent research demonstrates...
Flesh Stealer

Flesh Stealer Malware Attacking Chrome, Firefox, and Edge Users to Steal Passwords

0
A newly identified malware, Flesh Stealer, is rapidly emerging as a significant cybersecurity threat in 2025.Designed to extract sensitive data such as passwords,...
Chinese CDN

Chinese CDN Exploiting AWS & Microsoft Cloud to Host Malicious Websites

0
A recent investigation by cybersecurity firm Silent Push has revealed how a China-linked Content Delivery Network (CDN), known as FUNNULL, is exploiting major cloud...
ScreenConnect

Cybercriminals Abusing ScreenConnect RMM Tool for Persistent Access

0
Cybersecurity experts have identified an alarming trend of cybercriminals exploiting ConnectWise ScreenConnect, a widely-used Remote Monitoring and Management (RMM) tool, to establish persistent access...

Authorities Seize 8Base Ransomware Dark Web Site, Arrest Four Key Operators

0
Thai authorities arrested four European hackers in Phuket on February 10, 2025, for their alleged involvement in ransomware operations that inflicted global losses exceeding...

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

What is Deep WebThe deep web, invisible web, or hidden web are parts of the World Wide Web whose contents are not indexed by...

How to Build and Run a Security Operations Center (SOC Guide) – 2023

Today’s Cyber security operations center (CSOC) should have everything it needs to mount a competent defense of the ever-changing information technology (IT) enterprise.This includes...

Network Penetration Testing Checklist – 2024

Network Penetration Testing checklist determines vulnerabilities in the network posture by discovering open ports, troubleshooting live systems, and services, and grabbing system banners.The pen-testing helps...

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

TeamViewer's popularity and remote access capabilities make it an attractive target for those seeking to compromise systems for their gain.Threat actors target TeamViewer for...

Web Server Penetration Testing Checklist – 2024

Web server pentesting is performed under three significant categories: identity, analysis, and reporting vulnerabilities such as authentication weaknesses, configuration errors, and protocol relationship vulnerabilities. 1.  "Conduct a...

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

ATM Penetration testing, Hackers have found different approaches to hacking into ATM machines.Programmers are not restricting themselves to physical assaults, for example, money/card...

Operating Systems Can be Detected Using Ping Command

Operating Systems can be detected using Ping Command, Ping is a computer network administration software utility, used to find the Availability of a host...

Cloud Penetration Testing Checklist – 2024

Cloud Penetration Testing is a method of actively checking and examining the Cloud system by simulating the attack from the malicious code.Cloud computing is...

Web Application Penetration Testing Checklist – A Detailed Cheat Sheet

Web Application Pentesting is a method of identifying, analyzing, and Report the vulnerabilities which are existing in the Web application including buffer overflow, input...

Glossary