Tag Archive

A critical vulnerability, CVE-2024-20301 has been identified in Cisco Duo Authentication for Windows Logon and Remote Desktop Protocol (RDP), posing a security risk to affected systems. This flaw could allow an authenticated, local attacker to bypass secondary authentication mechanisms and …

The threat actor, who goes by the name “z0miner,” has been found to be attacking Korean WebLogic servers to distribute malware like miners, network tools, and scripts for attacking further. This threat actor has a history of attacking vulnerable servers …

Cloudflare has announced the launch of a new firewall specifically designed to protect AI models. This pioneering initiative aims to address the growing concerns around the security of artificial intelligence systems, which are increasingly becoming integral to various sectors. The …

Foxit Software has released an update for its Foxit PDF Reader 2024.1 and Foxit PDF Editor 2024.1 for Windows, addressing critical security vulnerabilities that could potentially allow attackers to execute remote code on a user’s system. The vulnerabilities affected earlier …

Two new zero-day vulnerabilities have been discovered in iOS and iPadOS 17.4 versions that could allow threat actors to bypass memory protections and perform arbitrary kernel read and write on the affected devices. These two vulnerabilities have been assigned with …

Malware can use the Notepad service to attack systems such as Windows and Linux since Notepad is a widely used application on most operating systems. Through malware, it is possible to use this tool to exploit system resources and user …

Threat actors have been discovered to be using a new technique for deploying the CHAVECLOAK banking trojan to target users in Brazil. This trojan is capable of stealing sensitive information related to financial activities.  The attack vector uses a malicious …