Tag Archive

The February 5th intrusion on Reddit was allegedly carried out by the ALPHV ransomware operation, also known as BlackCat. Threat actors gained Reddit’s systems through this phishing attempt to obtain internal documents, source code, employee data, and some information about …

Running a system network is not so easy, and for this, you need to select the right sysadmin tools so that work can happen peacefully. Right tools do their job perfectly, so it does not make much difference. As an …

LockBit has become the most reputable ransomware group in recent times. The method by which they operate differs from other ransomware groups. LockBit recruits people as affiliates for deploying ransomware inside organizations. The U.S. Department of Justice announced on Thursday, …

Since you are in the industry, especially in the network and admin team, you need to know a few vulnerabilities such as injection attacks to stay alert from them. Each attack or vulnerability has a different method, most importantly injection-type …

Ukraine remains under constant threat as the Russian state-sponsored hacking group Shuckworm (aka Armageddon or Gamaredon) continues to carry out numerous cyber attacks, mainly focusing on the following organizations of Ukraine:- Security services Military Government Information-stealing tools were used by …

Researchers uncovered a new phishing email campaign that employs ChatGPT and Google Bard to launch sophisticated email attacks. Threat actors had started relying on Artificial Intelligence since November 2022, when ChatGPT was released; many reports indicate threat actors using AIs to attack organizations.  There …

Two severe vulnerabilities in Azure services, Azure Bastion and Azure Container Registry—that allow Cross-Site Scripting (XSS) by leveraging a flaw in the postMessage iframe have been discovered. Cross-site scripting (XSS) is malicious scripts being unintentionally executed by users’ browsers after …

ChamelGang, a sophisticated threat actor believed to be based in China, has been using different tools for intrusions, as identified by the security researchers at Stairwell Threat Research in their recent investigation. While apart from this, the Threat Research team …

The WordPress Stripe Payment Gateway plugin has been vulnerable to Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability. WooCommerce developed this plugin.  The plugin version is 7.4.1 and has nearly 900K installations worldwide. Usually, payments are redirected to externally hosted checkout …