Tag Archive

GEOBOX is specialized software designed for Raspberry Pi devices that have been observed on the Dark Web being marketed as the next major development in fraud and anonymity technologies.  Cybercriminals have managed to turn the popular geek-favorite device into a …

The Mobile Security Framework (MobSF), a widely used pen-testing, malware analysis, and security assessment framework, has been found to contain a critical input validation flaw that could lead to server-side request forgery (SSRF) attacks. The vulnerability, tracked as CVE-2024-29190, affects …

Security researcher Henry N. Caga has identified a significant cross-site scripting (XSS) vulnerability within a Google sub-domain that allows hackers to perform various attacks, including session hijacking, phishing attacks, malware distribution, and data Theft. This vulnerability exposed a bad actor …

Unsaflok, in Dormakaba’s Saflok electronic RFID locks used in hotels and multi-family housing, allows attackers to forge a master keycard by exploiting weaknesses in the system and then using it to unlock any door within the affected property.  The vulnerability …

The Security Operations Center (SOC) is critical to any organization’s cybersecurity strategy. Every SOC’s success hinges on the competence of its team members. This article provides a five-step training blueprint to develop competent junior SOC specialists. Step 1: Refresh Cybersecurity …

Air Europa, a prominent Spanish airline, has announced a potential compromise of its customers’ data following a security incident detected in October of the previous year. This incident has raised alarms over the safety of personal information in the aviation …

Linux systems are used widely for servers, cloud environments, and IoT devices, which makes them an attractive target to cybercriminals, just as they are for any other platform. Its extensive usage also provides a big area of attack, and its …

First identified in 2020, Sysrv is a botnet that uses a Golang worm to infect devices and deploy cryptominers, propagates by exploiting network vulnerabilities, and has been continuously updated with new techniques by its operators.  Researchers have documented these advancements …