Category Archive

The Quad7 botnet (aka 7777 botnet, xlogin botnet) has gained attention for its use of compromised TP-Link routers to conduct attacks on Microsoft 365 accounts.  This botnet primarily employs password-spraying techniques, which involve attempting to log in with a list …

A CI/CD pipeline is a series of automated steps that helps software teams deliver code faster, safer, and more reliably.  It coordinates all the processes involved in continuous integration (CI) and continuous delivery (CD). The CTO of Razz Security, Mukesh, …

Earth Preta, also known as Mustang Panda, Bronze President, RedDelta, and Red Lich, is a sophisticated Chinese APT group that has been active since at least 2012.  They are known for targeting government entities, academic institutions, foundations, and research sectors …

Zyxel has issued critical hotfixes to address a command injection vulnerability identified in two of its Network Attached Storage (NAS) products, NAS326 and NAS542. These devices, which have reached end-of-vulnerability-support, are susceptible to attacks that could allow unauthorized command execution. …

Asymmetric cryptography, or public key cryptography, is a cornerstone of modern digital security. It plays a crucial role in ensuring secure communications over the internet and is fundamental to the functioning of various security protocols and applications. This article explores …

The Cybersecurity and Infrastructure Security Agency (CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, warning that threat actors are actively exploiting them in the wild. The vulnerabilities affect various products and could lead to serious consequences …

A high school in south London, Charles Darwin School, has been forced to close its doors temporarily due to a severe ransomware attack. The incident has left approximately 1,300 students without access to their educational facilities for the first half …

Security researchers have unveiled new techniques that allow attackers to exfiltrate sensitive data from air-gapped computers, which are systems physically isolated from unsecured networks. Despite air gaps being a strong security measure, these attacks demonstrate that determined adversaries can still …

WhatsApp’s “View Once” feature, designed to enhance privacy by allowing users to send photos and videos that disappear after being opened once, has been found to have a critical flaw that attackers are actively exploiting. The Zengo X Research Team …

GeoServer is an open-source server for sharing geospatial data, and this open-source software server is written in Java.  It publishes data from any major spatial data source using open standards. GeoServer is designed for teamwork and allows users to share, …