As per recent reports, Kubernetes has been discovered with a remote code execution vulnerability, which could allow a threat actor to execute code on the affected Windows endpoints inside a …
APT36 Using Customized Malware to Attack Indian Government Linux and Windows Servers
APT36 is a highly sophisticated APT (Advanced Persistent Threat) group that is known for conducting targeted espionage in South Asia and is strongly linked to Pakistan. While this APT group …
Adobe PDF Creator Zero-day Vulnerability Exploited in the Wild
Adobe has published a security update for Adobe Acrobat PDF and Reader for Windows and macOS as part of its regular Patch Tuesday updates. This patch fixes a ‘Critical’ vulnerability, which …
Interactive Malware Sandbox – Free File Analysis, Live Malware Hunting & Threat Intelligence
The versatility of malware sandboxes extends beyond behavioral analysis, making them a valuable assets in many contexts. The list of use cases grows even larger when you add a layer …
Windows Update Addressed 2 Zero-Days and 52 Other Vulnerabilities
Microsoft has released its Patch Tuesday update, which includes 59 vulnerabilities along with two Zero-Days. The severity for these vulnerabilities ranges from 4.3 (Medium) to 8.8 (High). Categories of the …
OriginBotnet Attack Windows Machine Using Weaponized Word Document
A recent cyberattack effort was discovered that used a malicious Word document delivered via phishing emails, causing victims to download a loader that launched a succession of malware payloads. OriginBotnet, …
SAP Security Vulnerabilities Let Attackers Perform Code Injection
SAP has released its September security patches in which 13 vulnerabilities were related to Information Disclosure, Code Injection, Memory Corruption, and much more. The severity for these vulnerabilities ranges between …
Airbus Cyber Attack: Over 3,200 Vendor Data Accessed by Hackers
According to recent reports, a threat actor has compromised the confidential information of 3,200 Airbus vendors. The exposed data includes sensitive details such as names, phone numbers, and email addresses. …
Massive Ransomware Attack on SriLanka Wipes Out Months of Data
The Information and Communication Technology Agency (ICTA) has officially confirmed a severe data loss incident that has had a far-reaching impact on all government offices using the “gov.lk” email domain. …
Loda Malware Attack Windows To Control RDP, Spread Malware, And Log User Inputs
Threat actors have been actively employing Loda, a remote access trojan (RAT) developed in AutoIT, an accessible language for automating Windows computer scripting. The malware may deliver various harmful payloads …