Tag Archive

Cisco has recently disclosed multiple critical vulnerabilities in its Smart Licensing Utility (CSLU), which could allow unauthenticated, remote attackers to gain administrative access or collect sensitive information from affected systems. These vulnerabilities, identified as CVE-2024-20439 and CVE-2024-20440, are present in …

Palo Alto Networks, the global cybersecurity leader, has announced the completion of its acquisition of IBM’s QRadar Software as a Service (SaaS) assets. This strategic move, revealed on September 4, 2024, marks a significant milestone in the company’s mission to …

AI SPERA, a leading Cyber Threat Intelligence (CTI) company, has achieved PCI DSS v4.0 certification for its flagship search engine solution, Criminal IP. This accomplishment builds on last year’s attainment of PCI DSS v3.2.1 (Payment Card Industry Data Security Standard) …

Access control is fundamental to operating system (OS) security. It ensures that only authorized processes can perform specific actions on system resources. One key tool used to manage access control is the access matrix. This article explores an access matrix, how …

Emansrepo is a Python infostealer that was discovered by the FortiGuard Labs in August 2024 and has been disseminated through phishing emails containing fake purchase orders and invoices. It started its operation in November 2023, where Emansrepo retrieves exfiltrated data …

The Russian group RomCom, dubbed Storm-0978, distributes underground ransomware by leveraging the Microsoft Office and Windows HTML RCE zero-day vulnerability identified as CVE-2023-36884. This ransomware encrypts files on victims’ Windows computers, similar to typical ransomware, and then drops ransom notes …

Sophisticated threat actors, like those behind the ViperSoftX malware from 2020, often make use of existing tools to save time and resources.  ViperSoftX uses AutoIt, the CLR, and pre-made hacking scripts. This helps them to develop malware faster and avoid …

A well-known threat actor identified as “888” has claimed responsibility for leaking sensitive customer data belonging to BMW Hong Kong. According to the Breachforums post, “888” has allegedly leaked sensitive data from BMW Hong Kong, affecting approximately 14,057 customer records. …

Zyxel has issued patches to address a critical operating system (OS) command injection vulnerability identified as CVE-2024-7261. This vulnerability affects several versions of their access points (AP) and security routers. Users are strongly urged to apply these patches to safeguard …

MacroPack is a convenient tool for creating obfuscated VBA malware, but it is still a risk even with the macro execution restricted in downloaded Office documents from Microsoft. This tool can create several output types like office files, scripts, and …