Tag Archive

A malware sandbox is a versatile solution that offers a variety of tools for studying malicious behavior, including threats’ network traffic. A quick sandbox analysis can reveal tons of useful information, such as the malware’s communication with its command-and-control server …

The June 2024 Patch Tuesday update from Microsoft addressed almost 49 vulnerabilities in its products and 9 vulnerabilities in non-Microsoft products.  The update includes a critical vulnerability in Microsoft Message Queuing (MSMQ) that allows remote code execution to be tracked …

The Cardinal cybercrime group (aka Storm-1811, UNC4393), which operates the Black Basta ransomware, may have been exploiting a recently patched Windows privilege escalation vulnerability as a zero-day. CVE-2024-26169: The Vulnerability The vulnerability (CVE-2024-26169) occurs in the Windows Error Reporting Service. …

The Chrome team has released Chrome 126 to the Windows, Mac, and Linux stable channels. This update, which will roll out over the coming days and weeks, includes many fixes and improvements, focusing on security. Key Security Fixes Chrome 126 …

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a call to action for administrators and security professionals to review six newly released Industrial Control Systems (ICS) advisories. These advisories, released on June 11, 2024, provide critical information on current …

VideoLAN, the organization behind the popular VLC Media Player, has disclosed multiple critical vulnerabilities that could allow attackers to execute arbitrary code remotely. These vulnerabilities affect both the desktop and iOS versions of the software. The security advisories, identified as …

At the beginning of 2024, there were reports of Chinese threat actors targeting FortiGate systems with COATHANGER malware. However, it has been discovered that the Chinese cyber espionage campaign had much more extensive capabilities than before.  The Military Intelligence and …

A critical zero-click remote code execution (RCE) vulnerability has been discovered in Microsoft Outlook. This vulnerability, designated as CVE-2024-30103, enables attackers to run arbitrary code by sending a specially designed email. When the recipient opens the email, the exploit is …