Recently, two significant vulnerabilities related to memory corruption have been uncovered in the popular VLC media player. These vulnerabilities were found in the Microsoft Media Server (MMS), which has two …
Script Tracer Tool – Threat Researchers to Trace & Deobfuscate the Malware Execution
Cyber forensic tools play a crucial role in cyber investigations by helping investigators collect, analyze, and preserve digital evidence. These tools can extract data from various sources, such as:- Hard …
ChatGPT-Powered Malware Attacking Cloud Platforms to Steal Login Credentials
Threat actors can potentially exploit ChatGPT to generate convincing phishing emails or deceptive content encouraging users to download malware. They may also use the model to obfuscate malicious code or …
Top 6 Cyber Incident Response Plans – 2024
It is getting better and better that modern security tools can protect companies’ networks and endpoints from hackers. But sometimes, bad people still find a way in. Security teams need …
Google Calendar RAT Abusing Calendar Events to Create Red Teaming Infrastructure
Google Calendar RAT (GCR) is a proof of concept for Command & Control (C2) via Google Calendar Events. It’s useful when setting up a full red team infrastructure is challenging. …
What is Crowdsourced Threat Intelligence?
Threat intelligence is essential for cybersecurity, as it provides organizations with a clear view of the current threat landscape and enables them to adapt their defenses accordingly. While there are …
NODLINK – First-ever Online System for APT Attack Detection
Researchers point out that APTs (Advanced Persistent Threats) cause financial harm to organizations. For APT modeling, provenance graphs may be used to cut down on these losses and make detection better. …
4 Zero-Day Bug in Microsoft Exchange Let Attackers Execute Arbitrary Code
Four new zero-day vulnerabilities have been identified in Microsoft Exchange, which was associated with server-side request forgery and Remote Code Execution. These vulnerabilities haven’t been assigned CVEs and have severities …
RedLine Malware Steals Sensitive Data and Installs More Malware
Infostealers and the hackers who use them evolve to stay ahead of security measures. They adapt quickly to exploit new vulnerabilities and techniques, making it challenging for defenders to keep …
New Millenium RAT Sold on GitHub Attacking Windows Systems
Millenium-RAT, a sophisticated Remote Access Tool (RAT) for Windows systems, is now available for purchase on GitHub, which exclusively attacking windows systems. The Millenium-RAT, particularly version 2.4; is a Win32 …