CacheWarp is a new software-based fault attack that allows attackers to gain access to encrypted virtual machines (VMs) and escalate privileges on AMD’s Secure Encrypted Virtualization-Encrypted State (SEV-ES) and Secure Encrypted …
5 New Zero-day Vulnerabilities Patched in the Microsoft Security Update
Microsoft has released their security patches as part of their Patch Tuesday for November 2023. Microsoft has patched nearly 58 flaws, including 5 zero-day vulnerabilities. The vulnerabilities were associated with …
OracleIV: Dockerized Botnet Launches DDoS Attack Against Docker Engine
A DDoS (Distributed Denial of Service) attack floods a target system with massive traffic. Hackers use networks of compromised computers (botnets) to generate massive traffic, disrupting the target’s normal functioning …
Best Web Security Scanners For Vulnerability Scanning – 2024
Web Security Scanners: The world is moving towards digitalization; from small to large, every business has a website running to showcase its services, and simultaneously, the need for Web Application …
8-Point Security Checklist For Your Storage & Backups – 2024
On September 27th, Johnson Controls International announced a massive ransomware attack, that encrypted many of the company devices, including VMware ESXi servers. This impacted the company’s and its subsidiaries’ operations. The …
FBI Dismantled Notorious IPStorm Botnet Infrastructure
The FBI has achieved a remarkable feat in the fight against cybercrime, dismantling the infamous IPStorm botnet network that infected tens of thousands of devices across various platforms worldwide. The …
WP Fastest Cache Plugin Exposes Over 600K+ WordPress Sites to SQL Injection Attacks
In a recent development, the WPScan team has unearthed a significant security flaw within the widely-used WP Fastest Cache plugin. This vulnerability, categorized as an unauthenticated SQL injection, could potentially …
Hackers Deliver Weaponized LNK Files Through Legitimate Websites
LNK files are shortcut files in Windows that link to a program or file. Hackers may exploit LNK files to deliver malicious payloads by disguising them as legitimate shortcuts, taking …
8 New Metasploit Exploit Modules Released Targeting Critical Vulnerabilities
Metasploit is an open-source penetration testing framework created by Rapid7 that enables security professionals to simulate attacks against computer systems, networks, and applications. It includes several tools and modules that can …
Ransomedvc to Shutdown Operations, Selling Out Infrastructure
Ransomed[.]vc, a notorious ransomware and data extortion group, has recently announced the end of its operations and the auction of its entire cybercrime infrastructure. On October 30, 2023, the Telegram …