Tag Archive

A new malware bot was discovered by the experts at Cyble Research Labs in a cyber-crime forum featuring the name “MikuBot.” Mikubot is mainly designed to steal sensitive data or to launch hidden VNC sessions with the purpose of stealing …

Over 8,000 VNC endpoints have been discovered by researchers at Cyble security firm to be exposed to the internet. Threat actors can easily gain access to internal networks by accessing and using these exposed VNC endpoints without any authentication. VNC …

The Android banking Trojan SOVA (“Owl” in Russian) was under active development since September 2021. Reports say multiple versions of SOVA were found in March 2022 and some of these features were already implemented, which include 2FA interception, cookie stealing, …

The cybersecurity researchers at SEKOIA have recently identified a trojanized version of MiMi, which is primarily aimed at the Chinese market but is also cross-platform and can be used on many platforms. The trojanized version of MiMi has delivered a …

There is an authentication bypass security vulnerability in Zimbra which is actively exploited by cybercriminals in order to compromise ZCS email servers around the world. A wide range of businesses, including government and financial organizations, use Zimbra as an email …

CheckPoint researched the payment system built into Xiaomi smartphones powered by MediaTek chips. From the analysis, they identified vulnerabilities that can allow the forging of payment packages or disabling the payment system directly from an unprivileged Android application. Xiaomi’s TEE …

A high severity issue tracked as (CVE-2022-0028), CVSS score of 8.6, in Palo Alto Networks devices running the PAN-OS could allow an attacker to launch Denial-of-Service (DoS) attack. The issue stems from a Palo Alto Networks PA-Series (hardware), VM-Series (virtual), …

When it comes to penetration testing, there are many businesses that are still unsure of what it is and what benefits it can bring. In this article, we will be discussing penetration testing in detail and clear up any misconceptions …

Cisco released software updates that address the vulnerability affecting its Adaptive Security Appliance Software (ASA) and Firepower Threat Defense Software (FTD). The high severity flaw is tracked as (CVE-2022-20866) found in the handling of RSA keys on devices running Cisco …