A proof of Concept (PoC) has been published for a critical Remote Code Execution (RCE) vulnerability identified in Fortra’s FileCatalyst software. This vulnerability, tracked as CVE-2024-25153, poses a severe threat …
900+ Websites Exposing 100M+ Accounts Including Plaintext Passwords
New research has revealed that more than 900 websites had a serious misconfiguration, which exposed a massive 125 million user records, including plaintext passwords and sensitive billing information. These results …
Hackers Use Fingertip Friction Sound To Steal Fingerprints
Researchers have unveiled a new cybersecurity threat that could compromise the integrity of fingerprint authentication systems worldwide. The method, dubbed “PrintListener,” exploits the sound of fingertip friction on smartphone screens …
UK’s NCSC Releases SCADA Security Guidance to the Cloud
The National Cyber Security Centre (NCSC) of the United Kingdom has recently published a comprehensive set of guidelines designed to assist organizations in securely transitioning their Supervisory Control and Data …
133,000+ Vulnerable FortiOS/FortiProxy Instances : Exploitation Started
A critical security vulnerability has been identified in Fortinet’s FortiOS and FortiProxy, potentially affecting over 133,000 devices worldwide. The flaw, tracked as CVE-2024-21762, is an out-of-bounds write vulnerability that could …
Pentagon Received 50,000+ Vulnerability Reports Since November 2016
The Department of Defense (DoD) Cyber Crime Center (DC3) recently announced a significant milestone in its cybersecurity efforts. The processing of over 50,000 vulnerability reports since the inception of its …
Cisco Completes Acquisition of Splunk for $28 Billion
Cisco has officially completed its acquisition of Splunk for a staggering $28 billion. This strategic acquisition marks a milestone in Cisco’s journey. It promises to revolutionize how organizations leverage data …
87% of UK Organisations are Vulnerable to Cyberattacks : Microsoft AI Research
In a groundbreaking report released by Microsoft, in collaboration with Dr. Chris Brauer of Goldsmiths, University of London, an alarming 87% of UK organizations have been identified as vulnerable to …
WARNING: Hackers’ New Favorite Tool – Weaponized SVG Files!
Threat actors use SVG files in cyber-attacks because SVGs (Scalable Vector Graphic files) can contain embedded scripts, making them a vector for executing malicious code. Not only that even the …
LockBit Ransomware is Back From the Dead : Is Your SOC/DFIR Team Prepared?
Law enforcement disrupted LockBit ransomware operations in February, seizing infrastructure and their website. Regretfully, the victory appears to have been temporary. The gang’s leading members were not detained, and Operation …