Category Archive

A critical vulnerability has been discovered in the Common Log File System (CLFS) driver of Windows 11. This flaw enables local users to gain elevated privileges by exploiting a specific function within the system. The issue resides in the CClfsBaseFilePersisted::WriteMetadataBlock …

UnitedHealth Group (UHG) has confirmed a massive data breach affecting over 100 million American users. This cyberattack, which is being described as one of the largest in the healthcare sector, has raised significant concerns about patient privacy and data security. …

Security researchers from Aquasec recently discovered a critical vulnerability in the AWS Cloud Development Kit (CDK) that could allow attackers to gain full administrative access to targeted AWS accounts. The issue, reported to AWS in June 2024, affects CDK users …

A new sophisticated phishing campaign targeting government agencies, industrial enterprises, and military units in Ukraine and potentially other countries has been uncovered. The Computer Emergency Response Team of Ukraine (CERT-UA) issued an alert on October 22, 2024, warning of the …

The hacking group known as Kill Security has allegedly breached NoBroker, a prominent Bangalore-based proptech company. The group claims to have exfiltrated sensitive user data and is demanding a ransom of $50,000. The breach was announced by user @H4ckManac, who …

The Cybersecurity and Infrastructure Security Agency (CISA) has announced the addition of two new vulnerabilities to its Known Exploited Vulnerabilities Catalog. These vulnerabilities in widely used technologies are actively exploited by malicious actors, posing significant risks to federal and private …

Shadowserver has issued a critical warning about the widespread exploitation of Fortinet FortiManager devices using the recently disclosed CVE-2024-47575 vulnerability. With a CVSS score of 9.8/10, this critical flaw allows unauthenticated remote attackers to execute arbitrary code or commands on …

When it comes to protecting your business from increasingly sophisticated cyber threats, a Managed Security Information and Event Management (SIEM) solution is becoming a must-have. It offers advanced threat detection, real-time monitoring, and incident response capabilities, helping organizations stay ahead …

DarkComet, a stealthy Remote Access Trojan, silently infiltrates systems, stealing sensitive data like credentials and passwords. It also acts as a backdoor, enabling attackers to install malware and control infected machines for malicious activities. DarkComet is a Remote Access Trojan …

The Cybersecurity and Infrastructure Security Agency (CISA) has added a new vulnerability to its Known Exploited Vulnerabilities Catalog following evidence of its active exploitation. CVE-2024-38094 vulnerability affects Microsoft SharePoint and is categorized as a deserialization vulnerability. Malicious cyber actors often …