Tag Archive

Microsoft has addressed a critical zero-day vulnerability affecting its Windows Smart App Control (SAC) and SmartScreen security features. This vulnerability was fixed at Microsoft’s September 2024 Patch Tuesday, which addressed a significant number of security vulnerabilities, including four zero-day exploits …

Microsoft’s September 2024 Patch Tuesday has addressed a significant number of security vulnerabilities, including four zero-day exploits and a total of 79 vulnerabilities across various products. This monthly update is crucial for maintaining the security and integrity of systems running …

Cybersecurity researchers at Natto Thoughts recently discovered that Chinese hackers have been actively abusing open-source tools like Nmap to launch cyber attacks. Nmap (Network Mapper) is a free and open-source network scanner created by Gordon Lyon. This network scanner tool is …

Ivanti has issued security updates for its Endpoint Manager (EPM) 2024 and 2022 SU6 versions, addressing several critical and high-severity vulnerabilities that could lead to unauthorized access to the EPM core server. Ivanti Endpoint Manager (formerly known as LANDesk) is …

After three years of intensive development, Flipper Zero has released its highly anticipated firmware version 1.0. This major milestone marks the completion of numerous features that have been in the works since the project’s inception. “We have completed work on …

The Slim CD, Inc., a prominent payment processing gateway for US and Canadian merchants, has disclosed a data breach affecting approximately 1.7 million users. The unauthorized access between August 17, 2023, and June 15, 2024, potentially exposed sensitive credit card …

AI is significantly evolving penetration testing by enhancing automation, accuracy, and adaptability.  AI-driven tools can simulate sophisticated attack techniques, analyze vast datasets for vulnerabilities, and determine genuine threats from false positives, allowing security teams to focus on critical risks. The …

Border Gateway Protocol (BGP) is a critical component of the modern internet, enabling data routing between different networks, known as autonomous systems (AS). As the primary protocol for exchanging routing information across the Internet, BGP ensures that data packets efficiently …

The Quad7 botnet (aka 7777 botnet, xlogin botnet) has gained attention for its use of compromised TP-Link routers to conduct attacks on Microsoft 365 accounts.  This botnet primarily employs password-spraying techniques, which involve attempting to log in with a list …