Tag Archive

Mastodon is an open-source self-hosted social networking service company that is maintained as a non-profit. The platform is similar to Twitter, with a lot more features, and is privacy-focused. It works as a federated model with contributors from all over …

ICMP protocol is mainly used for error handling and primarily used for network devices (routers). Many different types of errors exist in the network layer that time ICMP can use to debug those errors. ICMP’s full form is Internet Control …

A critical-severity SQL injection flaw and two other high-severity vulnerabilities have been fixed in MOVEit Transfer, the software at the focus of the recent widespread Clop ransomware outbreaks. Progress Software detected SQL injection vulnerability, tracked as CVE-2023-36934, which can allow unauthenticated attackers access …

A newly evolved linux variant of AR crypt malware developed with GO language started targeting worldwide. The emergence of AR Crypt malware was seen in the year of  Aug 2022, able to target both Linux and Windows machines. According to …

An authentication bypass vulnerability exists in VMware SD-WAN (Edge). Upon successful exploitation, unauthorized attackers gain access to the application’s Diagnostic package under VMware SD-WAN Management. “An unauthenticated attacker can download the Diagnostic bundle of the application under Management”, according to …

Beware of attackers masquerading as well-known vacation rental websites such as Airbnb and Booking.com. Scammers that prey on tourists for Phishing Attacks are more active once the summer travel season is in full force. It is recommended to double-check the …

Charming Kitten, also known as TA453, is an Iranian government-based cyberwarfare group that has conducted several attacks since 2017. In the middle of May 2023, these threat actors sent a benign email posing as a Senior Fellow of the Royal …

Evil QR is a spin-off of a QR Jacking attack, the latest phishing attempt by threat actors to gain access to the victim’s machine. QRLJacking or Quick Response Code Login Jacking is a simple social engineering attack vector capable of …

A deceptive method used by malicious individuals to send emails with fictitious sender information is email spoofing. The attacker creates the impression that the email is coming from a reliable source, such as a reliable business or person, by changing …