Tag Archive

Recent email campaigns distribute DanaBot malware through two document types: those using equation editor exploits and those containing external links, where attackers send emails disguised as job applications with a malicious Word document attached.  The document itself doesn’t contain malware …

A few Critical vulnerabilities have been discovered in Cinterion Cellular modems that could allow an unauthorized remote attacker to execute arbitrary code on the affected devices and escalate their privileges. There have been millions of devices deployed worldwide making it …

Google has released an urgent security update for the Chrome browser to address a high-severity vulnerability that is being actively exploited in the wild. This marks the sixth zero-day exploit targeting Chrome users this year, highlighting the persistent threat posed …

A new threat has emerged on the darker corners of the internet. A threat actor has reportedly put up for sale a Remote Code Execution (RCE) 0-day exploit targeting various versions of Microsoft Outlook, with a staggering asking price of …

According to the Federal Communications Commission (FCC), the Royal Tiger Group and its employees are a Consumer Communications Information Services Threat (C-CIST). This is a crucial step for the FCC in its ongoing work to protect U.S. customers from sophisticated …

OpenAI, which is the leading artificial intelligence research lab, recently announced its latest breakthrough in AI technology called GPT-4o. This newest and most advanced model represents a significant leap forward in the realm of generative AI, as it has the …

Criminal IP, a renowned Cyber Threat Intelligence (CTI) search engine developed by AI SPERA, has recently signed a technology partnership to exchange threat intelligence data based on domains and potentially on the IP address to protect users by blocking threats …

An attacker published a malicious package on PyPI named “requests-darwin-lite,” masquerading as a variant of the popular “requests” library, which contained a hidden Golang binary within an unusually large version of the legitimate “requests” logo image.  The binary’s execution was …

Information such as financial records, customer information, and intellectual property that may be sold on the black web markets is what MS-SQL servers commonly store.  In addition, a hacked MS-SQL server can present an entry point into the organization’s network, …