HijackLoader, a modular malware loader observed in 2023, is evolving with new evasion techniques, as it is a variant using a PNG image to deliver next-stage malware like Amadey and …
Yoast SEO Plugin XSS Flaw Exposes 5 Million+ WordPress Websites to Attack
A critical cross-site scripting (XSS) vulnerability has been discovered in the popular Yoast SEO WordPress plugin, potentially putting over 5 million websites at risk of compromise. The flaw was found …
MITRE Shares Details on Nation-State Hackers’ Intrusion into Research Network
The MITRE Corporation, a not-for-profit organization that operates research and development centers for the U.S. government, has disclosed that sophisticated nation-state hackers recently compromised one of its internal research and …
Oracle Weblogic Server Flaw Allows Attackers Full Control – PoC Released
A new secondary JNDI injection vulnerability was discovered in a recent version of WebLogic, allowing attackers to trigger JNDI injection during another JNDI lookup process, effectively enabling Remote Code Execution …
Microsoft Defender XDR Expanded to Malicious OAuth Apps With the Power of AI
In an update to its security operations suite, Microsoft has announced the expansion of its Defender Extended Detection and Response (XDR) capabilities to include advanced AI-powered detection and mitigation of …
Beware! 150+ SSH Accounts With Root Access Advertised On Hacker Forums
In a concerning development for cybersecurity, over 150 SSH accounts with root access are currently being advertised for sale on various hacker forums. These accounts reportedly provide unrestricted administrative access …
New CraxsRAT Version Claims Capability To Bypass Google Play Antivirus
In a concerning development in the cybersecurity landscape, the latest version of CraxsRAT, known as v7.4, has been released with claims of enhanced capabilities, including the ability to bypass Google …
SandStorm Hackers Added New Kapeka Tool to it’s Arsenal
Kapeka, also known as KnuckleTouch, is a sophisticated backdoor malware that has been making waves in the cybersecurity world. Initially appearing in mid-2022, it wasn’t until 2024 that Kapeka was …
Why Your VPN May Not Be As Secure As It Claims
May 6, 2024 0 Comments Virtual private networking (VPN) companies market their services as a way to prevent anyone from snooping on your Internet usage. But new research suggests this …
New Cuckoo Malware Attacking macOS Users to Steal Sensitive Data
Cybersecurity researchers have uncovered a new malware strain dubbed “Cuckoo.” This malicious software exhibits characteristics of both spyware and an infostealer, targeting both Intel and ARM-based Macs with sophisticated tactics …