Tag Archive

A backdoor was recently discovered in the xz-utils package versions 5.6.0 to 5.6.1, shocking the Linux community. This poses a significant threat to the security of Linux distributions, including Kali Linux. The vulnerability, CVE-2024-3094, could potentially allow malicious actors to …

The Open Web Application Security Project (OWASP) Foundation disclosed a significant data breach. The breach, which was discovered in late February 2024, was caused by a misconfiguration of the foundation’s old Wiki web server. This incident has led to the …

Google Ads is a big platform with a wide user base, which makes it attractive to threat actors who want to reach many targets at once. These malicious ads can also be created or legitimate ones hijacked to spread malware, …

Vultur, Android banking malware, has been observed incorporating new technical features, which allow the malware operator to remotely communicate with the victim’s mobile device. Additionally, Vultur has begun disguising more of its harmful behavior by encrypting its C2 communication, employing …

As Gmail celebrates its 20th anniversary, it’s an opportune moment to reflect on its journey from a simple email service to a cornerstone of digital communication, emphasizing its evolution, security enhancements, user base growth, and innovative features. Gmail was Launched …

Microsoft Corporation (MSFT.O) has announced its decision to sell its chat and video app Teams separately from its Office suite globally. This move follows a similar unbundling in Europe, which was aimed at addressing antitrust concerns raised by the European …

A critical security breach has been identified in the xz compression utility’s liblzma library, leading to a significant compromise of SSH server security across various Linux distributions. The xz format is ubiquitous across Linux distributions, serving as a general-purpose tool …

The European Union Agency for Cybersecurity (ENISA) has published a comprehensive list of the top ten emerging cybersecurity threats anticipated to impact the digital landscape by 2030. This forecast culminates an extensive eight-month foresight exercise, incorporating insights from the ENISA …

A new keylogging server and client tool have been released on GitHub for pentesters. The tool utilizes DNS tunneling to transmit keystrokes through firewalls, potentially evading detection covertly. The tool, DNS-Tunnel-Keylogger, was designed for post-exploitation activities for pentesters and emphasizes …