Dr. Active Directory vs. Mr. Exposed Attack Surface: Who’ll Win This Fight?
Active Directory (AD) is among the oldest pieces of software still used in the production environment and can be found...
Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat Malware
Two malicious packages discovered in the npm package repository have been found to conceal an open source information stealer malware...
LockBit 3.0 Ransomware Victim: metalnet[.]nl
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: antea[.]es
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: enovationcontrols[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: shoreregional[.]org
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Cobalt Stike Beacon Detected – 43[.]139[.]246[.]195:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 175[.]178[.]61[.]109:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 38[.]147[.]172[.]149:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 134[.]209[.]221[.]114:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 62[.]204[.]41[.]24:4444
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]138[.]154[.]3:7443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 47[.]97[.]210[.]199:9999
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 78[.]85[.]17[.]88:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]139[.]52[.]123:82
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]138[.]86[.]26:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 180[.]184[.]50[.]81:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Multiple Page Generator Plugin for WordPress cross-site request forgery | CVE-2023-2608
NAME__________Multiple Page Generator Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress Multiple Page Generator Plugin for WordPress 3.3.17Risk Level:3.1Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Multiple...
Gira cross-site scripting | CVE-2023-2739
NAME__________Gira cross-site scriptingPlatforms Affected:Gira HomeServer 4.12Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Gira is vulnerable to cross-site scripting, caused by improper validation of user-supplied...
Video Gallery Plugin for WordPress cross-site scripting | CVE-2023-2708
NAME__________Video Gallery Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Video Gallery plugin for WordPress 1.0.10Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Video Gallery Plugin for...
Aruba EdgeConnect Enterprise information disclosure | CVE-2023-30510
NAME__________Aruba EdgeConnect Enterprise information disclosurePlatforms Affected:Aruba Networks Aruba EdgeConnect EnterpriseRisk Level:4.1Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Aruba EdgeConnect Enterprise could allow a remote authenticated...
PDF-XChange Editor code execution | CVE-2023-32158
NAME__________PDF-XChange Editor code executionPlatforms Affected:Tracker Software PDF-XChange EditorRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________PDF-XChange Editor could allow a remote attacker to execute arbitrary...
ProSys OPC UA Simulation server denial of service | CVE-2023-27321
NAME__________ProSys OPC UA Simulation server denial of servicePlatforms Affected:Prosys OPC UA Simulation Server 5.4.2Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Prosys OPC UA...
Linux Kernel denial of service | CVE-2023-32252
NAME__________Linux Kernel denial of servicePlatforms Affected:Linux KernelRisk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Linux Kernel is vulnerable to a denial of service, caused...
