Cobalt Stike Beacon Detected – 104[.]194[.]11[.]249:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 141[.]105[.]66[.]36:8443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 103[.]14[.]34[.]85:8080
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
CVE-2021-30860 – Apple / Multiple – Integer overflow
Summary: CVE-2021-30860 is an integer overflow vulnerability impacting Apple macOS Catalina, Apple macOS Big Sur versions 11.5.2 and earlier, Apple...
A week in security (Dec 20 – 26)
Last week on Malwarebytes Labs: When a deepfake “empire” continues to growEverything you always wanted to know about NFTs (but...
Logistics giant D.W. Morgan exposed 100 GB worth of clients’ data, including Fortune 500 Clients
The Website Planet security team discovered a data breach suffered by the multinational logistics giant D.W. Morgan. The Website Planet security team discovered an Amazon...
US-CERT Bulletin (SB21-361):Vulnerability Summary for the Week of December 20, 2021
The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards...
A new wave of ech0raix ransomware attacks targets QNAP NAS devices
A new wave of ech0raix ransomware attacks is targeting QNAP network-attached storage (NAS) devices. The threat actors behind the ech0raix...
Apache addressed a couple of severe vulnerabilities in Apache HTTP Server
The Apache Software Foundation released Apache HTTP Server 2.4.52 to address a couple of security flaws that can lead to...
Experts found backdoors in a popular Auerswald VoIP appliance
Researchers found multiple backdoors in popular VoIP (voice over Internet protocol) appliance made by the German manufacturer Auerswald. Researchers from...
CVE-2021-45078
Summary: stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow)...
CVE-2021-45105
Summary: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3) did not protect from uncontrolled recursion from self-referential lookups. This allows...
CVE-2021-45105
Summary: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3) did not protect from uncontrolled recursion from self-referential lookups. This allows...
CVE-2021-45105
Summary: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3) did not protect from uncontrolled recursion from self-referential lookups. This allows...
CVE-2021-45105
Summary: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3) did not protect from uncontrolled recursion from self-referential lookups. This allows...
CVE-2021-45105
Summary: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3) did not protect from uncontrolled recursion from self-referential lookups. This allows...
CVE-2021-24747
Summary: The SEO Booster WordPress plugin before 3.8 allows for authenticated SQL injection via the "fn_my_ajaxified_dataloader_ajax" AJAX request as the...
CVE-2021-43854
Summary: NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and...
CVE-2021-24981
Summary: The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary...
Experts monitor ongoing attacks using exploits for Log4j library flaws
Researchers from DrWeb monitored attacks leveraging exploits for vulnerabilities in the Apache Log4j library Researchers from DrWeb monitored attacks leveraging...
Dark web marketplace ToRReZ shuts down on their own’s decision
The operators of the ToRReZ dark web marketplace have shut down their operation claiming it is the result of their...
Snap-Scraper – Snap Scraper Enables Users To Download Media Uploaded To Snapchat’s Snap Map Using A Set Of Latitude And Longitude Coordinates
Snap Scraper is an open source InstallationMacOSDownload the current linked binary in the most recent release. Using terminal ensure you...
Cobalt Stike Beacon Detected – 157[.]245[.]132[.]0:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 181[.]214[.]152[.]127:5555
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
