Tag Archive

In a race against the clock to protect user security, major browser vendors, including Google and Mozilla, have rushed to release critical updates in response to a critical vulnerability discovered in the WebP Codec. This newly discovered vulnerability with the …

Researchers uncover a novel Github vulnerability that might let an attacker exploit a race condition in GitHub’s repository creation and username renaming operations. A Repojacking attack may be carried out using this method. Exploiting this issue successfully impacts the open-source community …

In a recent cyber incident, the ALPHV/BlackCat ransomware group has claimed responsibility for causing disruptions at MGM Resorts.  Their method involved gaining an employee’s trust via a phone call, which reportedly took only 10 minutes to execute. The ALPHV ransomware …

As per recent reports, Kubernetes has been discovered with a remote code execution vulnerability, which could allow a threat actor to execute code on the affected Windows endpoints inside a Kubernetes Cluster with SYSTEM privileges. To exploit this vulnerability, the …

APT36 is a highly sophisticated APT (Advanced Persistent Threat) group that is known for conducting targeted espionage in South Asia and is strongly linked to Pakistan. While this APT group is known for targeting the following Indian sectors:- Government Defense …

Adobe has published a security update for Adobe Acrobat PDF and Reader for Windows and macOS as part of its regular Patch Tuesday updates. This patch fixes a ‘Critical’ vulnerability, which might allow an attacker to run malicious code on unprotected …

The versatility of malware sandboxes extends beyond behavioral analysis, making them a valuable assets in many contexts. The list of use cases grows even larger when you add a layer of interactivity provided by tools like the ANY.RUN service.  However, …

Microsoft has released its Patch Tuesday update, which includes 59 vulnerabilities along with two Zero-Days. The severity for these vulnerabilities ranges from 4.3 (Medium) to 8.8 (High).  Categories of the vulnerabilities patched include Information Disclosure (9), Elevation of Privilege (18), …

A recent cyberattack effort was discovered that used a malicious Word document delivered via phishing emails, causing victims to download a loader that launched a succession of malware payloads.  OriginBotnet, RedLine Clipper, and Agent Tesla were among the payloads used. …