Category Archive

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about critical vulnerabilities identified in PTZOptics PT30X-SDI/NDI cameras. These vulnerabilities, tracked as CVE-2024-8957 and CVE-2024-8956, could allow attackers to escalate privileges and execute commands with root access. CVE-2024-8957: …

Two zero-day vulnerabilities have been discovered and are currently being exploited in targeted attacks. The vulnerabilities, identified as CVE-2024-43047 and CVE-2024-43093, were disclosed in Android’s latest security bulletin, prompting urgent calls for users to update their devices immediately. CVE-2024-43047, a …

Nokia, the multinational telecommunications company, is currently investigating claims of a significant data breach after a notorious hacker known as IntelBroker announced the sale of allegedly stolen source code and sensitive information. The hacker, in collaboration with another threat actor …

Figuring out SOC pricing doesn’t have to be overwhelming. I’ve been there—facing the question of “How much should we spend on security?” You’re not alone. It’s a tricky balance between protecting your business and managing costs. SOC pricing depends on …

AV, anti-malware, and EDR are tools that are primarily used to detect and prevent cyber-attacks. While the AV/EDR bypass tools are designed to evade detection by AV and EDR systems. These tools are often used by threat actors for several …

Password spraying is a type of brute force attack where an attacker attempts to access multiple user accounts by trying a small number of common passwords across many usernames. This method is useful as it avoids triggering account lockouts that …

QNAP Systems, Inc., a leading provider of network-attached storage (NAS) and networking solutions, has released a critical security update for its QuRouter devices, addressing a zero-day vulnerability discovered during the Pwn2Own 2024 competition. The latest firmware release promptly patches the …

The state-sponsored cybersecurity threat group known as APT37 has been observed carrying out sophisticated reconnaissance activities against South Korean targets. The group, believed to be backed by North Korea, is focusing its cyberespionage efforts on various entities, including North Korean …

A critical security vulnerability has been discovered in pfSense version 2.5.2, potentially allowing attackers to execute arbitrary code on affected systems. The flaw, identified as CVE-2024-46538, is a stored cross-site scripting (XSS) vulnerability that could be exploited to achieve remote …

Okta, a leading identity and access management company, has patched a critical vulnerability in its Verify agent for Windows that could allow attackers to steal user passwords. The flaw, discovered during routine penetration testing, affects versions 5.0.2 to 5.3.2 of …