The FBI’s Internet Crime Complaint Center (IC3) has warned about a sophisticated smishing scam targeting drivers across multiple states. Since early March 2024, over 2,000 complaints have been filed with …
Citrix UberAgent Vulnerability Allows Attackers To Escalate Privileges
Citrix’s uberAgent, a sophisticated monitoring tool used to enhance performance and security across Citrix platforms, has been identified as having a critical vulnerability. The flaw, tracked under CVE-2024-3902, could allow …
Most Important Python Security Tools for Ethical Hackers & Penetration Testers 2024
There are a variety of Python security tools are using in the cybersecurity industries and python is one of the widely used programming languages to develop penetration testing tools. For …
MITRE Hacked – Attackers Compromised R&D Networks Using Ivanti Zero-days
The MITRE Corporation, a non-profit organization that runs federally funded research and development centers, has disclosed that a sophisticated cyber attack recently compromised one of its internal research and development …
PoC Exploit Released for Cisco IMC Flaw – Urgent Update Advised
Proof of Concept (PoC) exploit has been released for a critical vulnerability in Cisco’s Integrated Management Controller (IMC). This flaw, identified as CVE-2024-20356, allows for command injection and could enable …
Hackers Posing as LastPass Employee to Steal Master Password & Hijack Accounts
In a sophisticated cyber attack, hackers have been discovered impersonating LastPass employees in an elaborate phishing campaign designed to steal users’ master passwords and hijack their accounts. This alarming development …
New Redline Stealer Variant Leverages Lua Bytecode For Stealthiness
Redline Stealer is a powerful information-stealing malware, and hackers often exploit this stealthy stealer to gain unauthorized access to a victim’s sensitive data. Threat actors can steal many sensitive and …
Cisco IMC Command Injection Vulnerability Under Active Attack
An attacker with read-only or higher privileges on a Cisco Integrated Management Controller (IMC) can exploit a command injection vulnerability (CVE-2024-20295) to gain full control (root access) of the underlying …
Cerber Linux Ransomware Exploits Atlassian Servers To Take Full Control
Hackers often use Linux ransomware due to its prevalence in server environments. This type of ransomware offers higher potential payouts from organizations with critical data. Cybersecurity analysts at Cado Security …
“Cybercrime Index” Ranks: Russia, Ukraine, and China at the Top
A new “Cybercrime Index” has been introduced, ranking countries based on the threat level posed by cybercriminals. The Index reveals that many countries, led by Russia, Ukraine, and China, are …