In a significant blow to the global ransomware landscape, international law enforcement agencies have successfully disrupted the operations of the LockBit ransomware gang, one of the most prolific and active …
8,500+ Exchange Servers Vulnerable To Privilege escalation 0-Day Flaw
A critical vulnerability in Microsoft Exchange Server, identified as CVE-2024-21410, has been reported to be actively exploited by threat actors. This zero-day flaw allows remote unauthenticated attackers to perform NTLM …
Critical RCE Flaw in WordPress Bricks Theme Exposes 25,000+ Sites
A critical Remote Code Execution (RCE) vulnerability in the Bricks Builder theme for WordPress has put over 25,000 websites at risk, prompting an urgent security update. The flaw, identified as …
RSPAMD – Free Spam Filtering Tool to Analyse Email Threats With ANY RUN Sandbox
In a significant advancement for email security, ANY.RUN, a leader in malware analysis sandboxing, has unveiled a new module integrating RSPAMD into its Static Discovering feature. This RSPAMD integration marks …
QNAP 0-Day Flaw : 289,000+ Devices Found Vulnerable
Last week, QNAP released a security advisory in which multiple vulnerabilities were fixed in QTS, QuTS hero and QuTScloud products. The vulnerabilities were assigned with CVE-2023-47218 and CVE-2023-50358. The severity …
Raccoon Infostealer Operator Extradited to the United States
In a significant development in the fight against cybercrime, Ukrainian national Mark Sokolovsky, 28, has been extradited to the United States from the Netherlands to face charges related to his …
Top 10 Best Network Security Solutions for IT Managers – 2024
Network security solutions employ a variety of techniques to prevent attacks targeting networks. To filter incoming and outgoing traffic, they use complex firewalls. This allows legitimate communications to go through …
Russian Hackers Breached 80+ Organizations Using Roundcube XSS Flaw
The Russia-based threat group TAG-70 has been discovered to be exploiting Roundcube webmail servers with a recently disclosed Cross-Site Scripting vulnerability CVE-2023-5631. Their targets include government, military, and national infrastructure-related …
Top 10 Best DDoS Protection Tools & Services – 2024
A Distributed Denial-of-Service (DDoS) attack is a malicious attempt to interrupt the regular traffic of a targeted server, service, or network by flooding the target or the area around it …
NSO Group’s Mysterious MOBILE & WIRELESS ‘MMS Fingerprint’ Hack Revealed
The “MMS Fingerprint” attack, a previously unidentified mobile network attack purportedly employed by spyware company NSO Group, is referenced in a single sentence in an agreement between NSO and Ghana’s …