Category Archive

A critical vulnerability has been discovered in Kemp’s LoadMaster Load Balancer, allowing for full system compromise through a command injection attack. This security flaw, identified as CVE-2024-7591, affects all LoadMaster versions up to and including 7.2.60.0, as well as multi-tenant …

A critical security flaw in Windows 11 has been discovered, allowing attackers to gain elevated system privileges through an integer overflow vulnerability. The exploit, which affects the ksthunk.sys driver was successfully demonstrated at the recent TyphoonPWN 2024 event, where it …

T-Mobile revealed how it successfully blocked attempts by the Chinese hacking group Salt Typhoon to infiltrate its network. This announcement follows reports from earlier this month about Salt Typhoon’s successful breaches of wiretap systems managed by major U.S. telecom companies, …

A newly discovered malware, dubbed GodLoader, is raising alarms in the cybersecurity community for its ability to stealthily infect devices across multiple operating systems, including Windows, macOS, Linux, Android, and iOS. Unveiled by Check Point Research, this advanced malware exploits …

The notorious Black Basta ransomware group has escalated its attack strategy, now leveraging Microsoft Teams as a potent tool for social engineering. This alarming development, observed throughout October 2024, has targeted hundreds of organizations across various sectors, including finance, technology, …

Analysts often face an overwhelming number of threats daily, each demanding a detailed examination to understand its behavior and potential impact. When alerts start piling up, manually analyzing each one becomes time-consuming and puts your team under pressure. Fortunately, these …

Elpaco ransomware, a Mimic variation, has been identified where attackers were able to connect via RDP to the victim’s server following a successful brute force attack and subsequently execute the ransomware. The variant abuses the Everything DLL, which is used …

In a study examining popular corporate VPN clients, including traditional SSL-VPN clients and modern Zero Trust solutions, researchers uncovered vulnerabilities in the trust relationships between these VPN clients and their servers. These flaws demonstrated how attackers could exploit the tools …

Since 2023, the Chinese APT group Earth Estries (aka Salt Typhoon, FamousSparrow, GhostEmperor, and UNC2286) has mostly targeted government agencies and vital industries, including telecoms in the US, Asia-Pacific, Middle East, and South Africa. The group uses sophisticated attack methods …