The U.S. Department of Justice (DOJ) today said they arrested the alleged operator of 911 S5, a ten-year-old online anonymity service that was powered by what the director of the …
Virustotal Shares New Ideas to Track Threat Actors
In a recent presentation at the FIRST CTI in Berlin and Botconf in Nice, VirusTotal unveiled innovative methods to track adversary activity by focusing on images and artifacts used during …
Foxit PDF Reader and Editor Flaw Let Attackers Escalate Privilege
Foxit PDF reader has been discovered with a new privilege escalation vulnerability that allows a low-privileged user to escalate their privileges. This vulnerability has been assigned with CVE-2024-29072 and the …
Moonstone Sleet New North Korean Hacker Group With Unique Tricks
Microsoft has identified a new North Korean threat actor, now tracked as Moonstone Sleet (formerly Storm-1789). This actor uses a combination of many tried-and-true techniques used by other North Korean …
Hackers Weaponizing Microsoft Office Documents to Deploy Malware in Business Environments
Microsoft Office allows one to generate a professional business report on office365 or write college essays, prepare CVs, take notes, and perform analysis. These offer text and data editing, like …
U.S. Sanctions Cybercrime Network Behind Massive Residential Proxy Bothnet Service
The United States has imposed sanctions on a cybercrime network responsible for operating a massive residential proxy botnet service to combat cybercrime. This network, 911.re, has been implicated in various …
Citrix Workspace app Let Attackers Elevate Privileges From Local User to Root User
A critical security vulnerability has been identified in the Citrix Workspace app for Mac, potentially allowing attackers to elevate their privileges from a local authenticated user to a root user. …
Hackers Claim Ticketmaster Data Breach: 560M User Details and Payment Card Exposed
In a dramatic turn of events, hackers have claimed a massive data breach involving Ticketmaster, allegedly exposing the details of 560 million users and their payment card information. This claim …
Russian Hackers Charged For Selling Unauthorized Access To Computer Networks
A Russian citizen has been indicted for working as an “access broker” and selling unauthorized access to computer networks, including a victim company in New Jersey, U.S. Attorney Philip R. …
PoC Exploit Released for Critical Fortinet FortiSIEM Command Injection Vulnerability
A proof-of-concept (PoC) exploit has been released for a critical vulnerability in Fortinet’s FortiSIEM. The vulnerability, CVE-2024-23108, allows for remote, unauthenticated command execution as root. This article delves into the …