Cisco FXOS and NX-OS Software buffer overflow | CVE-2022-20824
NAME Cisco FXOS and NX-OS Software buffer overflow Platforms Affected:Cisco Nexus 3000 Series Switches Cisco MDS 9000 Series Multilayer Switches...
TRENDnet TV-IP572PI default account | CVE-2022-35203
NAME TRENDnet TV-IP572PI default account Platforms Affected:TRENDnet TV-IP572PI 1.0Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION TRENDnet TV-IP572PI contains default credentials. A remote attacker...
Delta Industrial Automation DIALink information disclosure | CVE-2022-2660
NAME Delta Industrial Automation DIALink information disclosure Platforms Affected:Delta Industrial Automation DIALink 1.4.0.0 Delta Industrial Automation DIALink 1.3.0.0Risk Level:9.8Exploitability:UnprovenConsequences:Obtain Information...
Node.js lusha-ui-components-v2 module code execution |
NAME Node.js lusha-ui-components-v2 module code execution Platforms Affected:Node.js lusha-ui-components-v2Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js lusha-ui-components-v2 module could allow a remote attacker...
Node.js fasly-audit-purge module code execution |
NAME Node.js fasly-audit-purge module code execution Platforms Affected:Node.js fasly-audit-purgeRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js fasly-audit-purge module could allow a remote attacker...
Node.js usaa-mocks-proxy module code execution |
NAME Node.js usaa-mocks-proxy module code execution Platforms Affected:Node.js usaa-mocks-proxyRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js usaa-mocks-proxy module could allow a remote attacker...
Threat actors are using the Tox P2P messenger as C2 server
Threat actors are using the Tox peer-to-peer instant messaging service as a command-and-control server, Uptycs researchers reported. Tox is a...
Daily Vulnerability Trends: Thu Aug 25 2022
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-2841A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610. It has been classified...
Kimsuky’s GoldDragon cluster and its C2 operations
Kimsuky (also known as Thallium, Black Banshee and Velvet Chollima) is a prolific and active threat actor primarily targeting Korea-related...
Ransomware updates & 1-day exploits
Introduction In our crimeware reporting service, we analyze the latest crime-related trends we come across. Last month, we again posted...
Plex discloses data breach and urges password reset
The streaming media platform Plex is urging its users to reset passwords after threat actors gained access to its database....
Cobalt Stike Beacon Detected – 124[.]222[.]131[.]194:9999
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 45[.]89[.]106[.]126:5555
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 179[.]60[.]149[.]8:8088
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 128[.]199[.]138[.]206:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]134[.]29[.]177:8888
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 107[.]172[.]102[.]68:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 8[.]210[.]76[.]6:4433
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 47[.]104[.]212[.]159:8888
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 192[.]144[.]234[.]75:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 121[.]36[.]164[.]9:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
HIVE Ransomware Victim: Baton Rouge General
HIVE Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...
Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus
We investigate mhyprot2.sys, a vulnerable anti-cheat driver for the popular role-playing game Genshin Impact. The driver is currently being abused...
CISA: Preparing Critical Infrastructure for Post-Quantum Cryptography
Preparing Critical Infrastructure for Post-Quantum Cryptography CISA has released CISA Insights: Preparing Critical Infrastructure for Post-Quantum Cryptography, which outlines the...
