Tag Archive

Threat actors adopt the highly invasive techniques of HTML smuggling to launch  Nokoyawa ransomware despite being delivered through macro and ICedID malware. The Nokoyawa Ransomware variant has been active since February 2022 and shares the similarity of known ransomware groups …

Media and frequent innovative releases aggressively fuel the rapid industry rise of generative AI (Artificial Intelligence) ChatGPT.  But, besides its innovative part, cybercriminals have also actively exploited these generative AI models for several illicit purposes, even before their rise. Cybersecurity …

A vulnerability affecting Apache RocketMQ servers was publicly disclosed in May 2023, allowing remote code execution through a gateway. RocketMQ is a cloud-native platform for messaging and streaming. The command execution vulnerability has been reported in RocketMQ affecting version 5.1.0 …

Tor (The Onion Router) has officially introduced a Proof-of-Work (PoW) mechanism to defend from attackers doing Denial of Service attacks. Users worldwide have widely adopted Tor for hiding their IP addresses and maintaining their privacy. The Onion services have always …

Several Buffer Overflow vulnerabilities have been discovered in Notepad++ that can be exploited by threat actors for malicious purposes. The severities of these vulnerabilities vary from 5.5 (Medium) to 7.8 (High). The vulnerabilities are based on heap buffer write overflow …

The rapid surge in LLMs (Large language models) across several industries and sectors has raised critical concerns about their safety, security, and potential for misuse. In the current threat landscape, threat actors can exploit the LLMs for several illicit purposes, …

In today’s digital landscape, databases are the fortresses where an organization’s most valuable data assets are stored and managed. However, these digital vaults are constantly under siege by cyber threats. As a cybersecurity professional, your responsibility is akin to that …

The internet domains serve as a launchpad for threat actors to launch several cyber attacks. By exploiting the internet domains as a launchpad platform, threat actors can perform the following activities on Malicious Websites:- Distribute malware Facilitate command and control …