Multiple vulnerabilities have been discovered in FortiOS and FortiProxy that were related to administrator cookie leakage, arbitrary command execution and sensitive information exposure. These vulnerabilities have been assigned with CVEs …
Hackers Attacking Infra Teams With Fake PuTTY & FileZilla Ads
A sophisticated malvertising campaign is targeting system administrators across North America. The attackers are using fake ads for popular system utilities to distribute a dangerous strain of malware known as Nitrogen. Step 1: Luring Victims with Malicious Ads The …
Quickly Check if a Sample is Malicious with ANY.RUN Sandbox Process Tree
ANY.RUN’s Process Tree shows all the processes that start when a file or URL is run in its sandbox, along with their hierarchical relationships.This is accomplished by capturing the initial …
April’s Patch Tuesday Brings Record Number of Fixes
If only Patch Tuesdays came around infrequently — like total solar eclipse rare — instead of just creeping up on us each month like The Man in the Moon. Although …
French Football Club Ticketing System Targeted in Cyber Attack
Paris Saint-Germain (PSG), one of France’s premier football clubs, has been the victim of a cyber attack. The club’s ticketing system was explicitly targeted, raising concerns over data security and …
90,000+ LG TVs Vulnerable to Authorization Attacks Due to WebOS Vulnerabilities
Bitdefender Labs has revealed a critical security flaw in over 90,000 LG smart TVs running the company’s proprietary WebOS platform. If exploited, the vulnerability could allow attackers to gain unauthorized …
$30 Million Bounty Rewards For Android, iOS, & Chrome Zero-day
This year, Crowdfense is expanding its scope to encompass additional major research fields like Enterprise Software, WiFi/Baseband, and Messengers and is proposing a larger 30 million USD acquisition program. Crowdfense …
Russia Charges Local Flight Booking Platform Following Data Breach
Top executives of Sirena-Travel JSC, the developer behind the Leonardo airline ticket reservation system, find themselves at the center of a criminal prosecution. The charges arise from a data breach …
Hackers Using Malware-Driven Scanning Attacks To Pinpoint Vulnerabilities
Attackers are now using malware-infected devices to scan target networks instead of directly scanning them. This approach helps them to hide their identity, evade geographical restrictions (geofencing), and grow their …
Hackers Hijacking Popular YouTube Channels To Deliver Infostealer Malware
Hackers always end up targeting famous YouTube channels because of their large audience base, and their aim is to exploit the same for different reasons. Hacking such a platform becomes …