A new command injection vulnerability and a backdoor account have been discovered in D-Link Network Attached Storage devices, which affects D-Link NAS devices, including DNS-340L, DNS-320L, DNS-327L, and DNS-325, among …
HTTP/2 Continuation Flood Attack : Single Machine Can Bring Down Server
Security researcher Bartek Nowotarski disclosed a new class of vulnerabilities within the HTTP/2 protocol, known as the HTTP/2 CONTINUATION Flood. This attack vector is proving to be a significant threat, …
Center Identity Launches Patented Passwordless Authentication for Businesses
Center Identity, a pioneering cybersecurity company, is excited to unveil its patented secret location authentication, reshaping how businesses manage workforce digital identity. This proprietary technology enables users to authenticate their …
Fake Lawsuit Threat Exposes Privnote Phishing Sites
A cybercrook who has been setting up websites that mimic the self-destructing message service privnote.com accidentally exposed the breadth of their operations recently when they threatened to sue a software …
Researchers Unveil The Attackers Behind The Agent Tesla Campaign
Check Point Research has exposed a recent wave of cyberattacks utilizing the infamous Agent Tesla malware. This campaign targeted organizations in the United States and Australia. First appearing in 2014, Agent …
300,000 Chinese Devices in US : 40% Increase Despite Official Bans
Chinese devices are suspected of administering cyber espionage due to concerns over potential backdoors, supply chain vulnerabilities, and the risk of tampering. State-sponsored cyber threats, such as viral memes, are …
Hackers Hijacking YouTube Channels to Steal Your Data
Cybercriminals are increasingly exploiting YouTube, a platform beloved by millions, to produce sophisticated malware attacks. These threat actors, leveraging the impression of free software and video game enhancements, target unsuspecting …
Hackers Claiming of Working Windows 0-Day LPE Exploit
A new claim has surfaced on the internet regarding a zero-day exploit that targets the Windows operating system. This exploit, which enables local privilege escalation (LPE), could allow attackers to …
WordPress Plugin SQl Injection Exposes 1,000,000 Sites to Cyber Attack
Over a million WordPress websites have been at risk due to a critical SQL Injection vulnerability discovered in the popular LayerSlider plugin. The flaw, CVE-2024-2879, could allow unauthenticated attackers to …
Feds Stepping to Patch Years-old SS7 Vulnerability in Phone Networks
The FCC (Federal Communications Commission) seeks public input regarding measures by communications providers to address vulnerabilities in SS7 and Diameter protocols that enable tracking consumers’ mobile device locations without consent. …