Tag Archive

The FBI is warning about a surge in work-from-home scams preying on individuals seeking legitimate employment opportunities.  These scams often lure victims with the promise of easy money and simple tasks but ultimately steal their hard-earned cash through deceptive tactics. …

Cisco has disclosed a significant security vulnerability in its Webex Meetings platform that allowed unauthorized access to meeting information and metadata. The issue, identified in early May 2024, affected certain customers hosted in Cisco’s Frankfurt data center. The vulnerability was …

Tripwire, a leading provider of integrity monitoring and security solutions, disclosed a critical vulnerability in its Tripwire Enterprise (TE) software. The flaw, identified as CVE-2024-4332, allows unauthenticated attackers to bypass authentication and gain privileged access to Tripwire Enterprise 9.1.0’s REST …

The Europol-led Operation Endgame focuses on the individual threat actors operating behind the botnets. Cyberlaw enforcement is very dedicated to locating who created the once-powerful Emotet malware as a service; this creator is known only by the codename “Odd.” Operation …

Progress-owned Telerik Report Server addressed two vulnerabilities in its system, which were associated with Authentication bypass and Insecure Deserialization. To add a note, the insecure deserialization was marked as 9.9 (Critical) instead of 8.8 (High), which was the original severity …

Hackers use JavaScript frameworks since they offer a wide range of functionalities and tools that could be used to bypass detection, hide code, and carry out harmful acts. In addition, they take advantage of the people’s trust in such popular …

A Proof-of-Concept (PoC) exploit has been released for a critical privilege escalation vulnerability in the Linux kernel. The vulnerability tracked as CVE-2023-3390 has raised alarms due to its potential to allow attackers to gain elevated privileges on affected systems. This …

TikTok has confirmed that hackers exploited a zero-day vulnerability in its direct messaging (DM) feature to hijack several high-profile accounts. The affected accounts include those of celebrities like Paris Hilton and major media organizations such as CNN and Sony. The …

ANY.RUN revamped their user interface for a more streamlined workflow, as the sandbox homepage now features shortcut buttons for launching new analysis sessions, eliminating the need to navigate through the outdated map interface.  A dedicated demo page within the Threat …