Tag Archive

SAP has released their updates for patch day of this month, in which several vulnerabilities have been fixed and CVEs have been updated. The severity of the patched bugs varies from 4.5 (medium) to 10.0 (critical). The most critical severity …

Microsoft has taken another step towards security which has revolutionized the way security professionals use Microsoft 365 Defender across devices as well as cloud applications. This time they have pivoted the process of examining a single file across multiple systems …

The ransomware attacks are becoming more frequent and rapidly increasing in size as well. This alarming pace of ransomware is significantly concerning the thousands of private and public organizations around the world across several industries.  Threat actors target all sorts …

Testing your organization’s capacity to stop, identify, and respond to assaults is essential since cyber threats are developing at an unprecedented rate. Red teaming is the practice of breaking into safe systems or data while posing as a hostile actor …

New advanced malware targets LATAM businesses with TOITOIN Trojan, revealing intricate layers. The complete attack is based on a multi-stage process that involves the following key things which highlight the severe effect of it:- Phishing emails Custom built modules Sophisticated …

When Atlassian Companion is installed on macOS, a vulnerability has been detected that enables remote code execution on users’ computers when they click the Edit button on a Confluence page. With the Atlassian Companion app, users can edit Confluence files …

A Notorious MalasLocker Ransomware, which has been active since March 2023, targets Zimbra servers and demands charity donations instead of Ransom. This group mostly targets corporate companies providing business services, software, and Manufacturing services around Italy, Russia, and the United …

Mastodon is an open-source self-hosted social networking service company that is maintained as a non-profit. The platform is similar to Twitter, with a lot more features, and is privacy-focused. It works as a federated model with contributors from all over …

ICMP protocol is mainly used for error handling and primarily used for network devices (routers). Many different types of errors exist in the network layer that time ICMP can use to debug those errors. ICMP’s full form is Internet Control …

A critical-severity SQL injection flaw and two other high-severity vulnerabilities have been fixed in MOVEit Transfer, the software at the focus of the recent widespread Clop ransomware outbreaks. Progress Software detected SQL injection vulnerability, tracked as CVE-2023-36934, which can allow unauthenticated attackers access …