Tag Archive

Linux systems are used widely for servers, cloud environments, and IoT devices, which makes them an attractive target to cybercriminals, just as they are for any other platform. Its extensive usage also provides a big area of attack, and its …

First identified in 2020, Sysrv is a botnet that uses a Golang worm to infect devices and deploy cryptominers, propagates by exploiting network vulnerabilities, and has been continuously updated with new techniques by its operators.  Researchers have documented these advancements …

A sweeping vulnerability has been uncovered, leaving an estimated 167,500 instances across various networks susceptible to a Loop Denial of Service (DoS) attack. This discovery underscores the ever-present and evolving threats in the digital landscape, prompting an urgent call to …

The Pwn2Own Vancouver 2024 has come to an end, with researchers receiving a total of $1,132,500 for uncovering 29 distinct zero-day vulnerabilities.  Manfred Paul has been granted the title of Pwn Master. In all, he earned $202,500 and 25 points. …

Despite JavaScript’s widespread use, writing secure code remains challenging, leading to web application vulnerabilities. Experiments on real-world vulnerabilities show LLMs hold promise for automated JavaScript program repair, but achieving correct fixes frequently requires providing an appropriate amount of contextual information …

A critical Bamboo Data Center and Server vulnerability has been discovered with a critical vulnerability which has been given CVE-2024-1597 and the severity was given as 10.0 (Critical). This particular vulnerability was specifically mentioned by Atlassian that it is a …

Researchers at Akamai have unveiled a new technique that could potentially put millions of Windows domains at risk. This technique exploits the Dynamic Host Configuration Protocol (DHCP) administrators group to escalate privileges within Active Directory (AD) environments, a cornerstone of …

A threat actor has announced the sale of an exploit targeting a vulnerability in Foxit Reader, a widely used PDF viewer. This vulnerability could potentially allow remote code execution, posing a significant risk to millions of users worldwide. Foxit has …

Ivanti has been discovered with a new vulnerability on Ivanti Standalone Sentry that is associated with Remote code execution. The CVE for this vulnerability has been assigned with CVE-2023-41724, and the severity was given as 9.6 (Critical). However, Ivanti has …