Over 8,000 VNC endpoints have been discovered by researchers at Cyble security firm to be exposed to the internet. Threat actors can easily gain access to internal networks by accessing …
SOVA Android Banking Malware Adds Ransomware Feature to Encrypt Files
The Android banking Trojan SOVA (“Owl” in Russian) was under active development since September 2021. Reports say multiple versions of SOVA were found in March 2022 and some of these …
Chinese Hackers Backdoor Chat App to Steal Data From Windows, Linux & macOS
The cybersecurity researchers at SEKOIA have recently identified a trojanized version of MiMi, which is primarily aimed at the Chinese market but is also cross-platform and can be used on …
Zimbra Auth Security Flaw Used to Exploit Over 1,000 Govt. & Financial Orgs Servers
There is an authentication bypass security vulnerability in Zimbra which is actively exploited by cybercriminals in order to compromise ZCS email servers around the world. A wide range of businesses, …
Xiaomi Phones with MediaTek Chips Found Vulnerable to Forged Payments
CheckPoint researched the payment system built into Xiaomi smartphones powered by MediaTek chips. From the analysis, they identified vulnerabilities that can allow the forging of payment packages or disabling the …
Palo Alto Networks Devices Running the PAN-OS Could Allow Attacker to Launch DoS Attack
A high severity issue tracked as (CVE-2022-0028), CVSS score of 8.6, in Palo Alto Networks devices running the PAN-OS could allow an attacker to launch Denial-of-Service (DoS) attack. The issue …
Penetration Testing 101: What Is It, Importance, Benefits, on Pentesting Quote
When it comes to penetration testing, there are many businesses that are still unsure of what it is and what benefits it can bring. In this article, we will be …
Cisco High Severity Flaw Let Attackers Retrieve RSA Private Key Remotely
Cisco released software updates that address the vulnerability affecting its Adaptive Security Appliance Software (ASA) and Firepower Threat Defense Software (FTD). The high severity flaw is tracked as (CVE-2022-20866) found …
Onyx Ransomware Overwrites Files Larger than 2MB Instead of Encrypting Them
As early as mid-April of 2022 was the first time researchers discovered the Onyx ransomware. The ransomware group uses the double extortion method of encrypting and exfiltrating data from a …
10 Best Free Web Application Penetration Testing Tools 2022
Web Application Pentesting Tools are the most essential part of the penetration testing process when it comes to web-based applications. We all know very well that in the old days, …