Oil & Gas Targeted in Year-Long Cyber-Espionage Campaign
A sophisticated campaign aimed at big multinational oil and gas firms has been running for more than a year, spreading...
Job Seeking Engineers Have Become Lazarus Gang’s New Target
Amid operations sending malicious documentation to work-seekers, the renowned group Lazarus advanced persistent threat (APT) has been identified. In this...
After a Ransomware Attack, CNA Reports a Data Breach
Following a Phoenix CryptoLocker ransomware attack in March, CNA Financial Corporation, a leading US-based insurance firm, is notifying clients of...
RemotePotato0 – Just Another “Won’t Fix” Windows Privilege Escalation From User To Domain Admin
Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin. RemotePotato0 is an exploit that allows you to...
JWTweak – Detects The Algorithm Of Input JWT Token And Provide Options To Generate The New JWT Token Based On The User Selected Algorithm
With the global increase in JSON Web Token (JWT) usage, the attack surface has also increased significantly. Having said that,...
Hackers accessed Mint Mobile subscribers’ data and ported some numbers
Mint Mobile discloses a data breach, an unauthorized attacker gained access to subscribers’ account information and ported phone numbers. Mint...
Security Affairs newsletter Round 322
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for...
Iran’s railroad system was hit by a cyberattack, hackers posted fake delay messages
Iran’s railroad system was hit by a cyberattack, hackers posted fake messages about delays or cancellations of the trains on...
CVE-2020-25868
Summary: Pexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup. An unauthenticated remote attacker can...
CVE-2020-24144
Summary: Directory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker get access to...
CVE-2021-34620
Summary: The WP Fluent Forms plugin < 3.6.67 for WordPress is vulnerable to Cross-Site Request Forgery leading to stored Cross-Site...
CVE-2021-21807
Summary: An integer overflow vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.9. A specially crafted malformed file...
CVE-2021-21775
Summary: A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A...
Are Online Brands Prioritizing Speed Over Security? Here’s a Quick Look
Concern over online security has risen significantly in recent times. According to research published by Trulioo, consumers around the world...
Online Support Agents Being Targeted Through Live Chat Platforms
Phishing scammers are pretending to be customers contact live-chat assistance agents with fake issues, making them open infected files, says...
Millions of Login Credentials Stolen By an ‘Unnamed Malware’
Cybersecurity researchers from Nord Security have unearthed a new set of Trojan-type malware that has exploited over three million Windows...
Email Fatigue Elevates Cyber Crime Rates
According to research, email is indeed the most preferred medium of communication by almost 86 percent of professionals. Whilst the...
Cloud Cryptomining Scam in Google Play Rakes in Cash
Researchers stated that fraudulent crypto mining applications available for download on Google Play have scammed more than 93,400 people so...
Nexfil – OSINT Tool For Finding Profiles By Username
NExfil is an OSINT tool written in python for finding profiles by username. The provided usernames are checked on over...
The-Bastion – Authentication, Authorization, Traceability And Auditability For SSH Accesses
Bastions are a cluster of machines used as the unique entry point by operational teams (such as sysadmins, developers, database...
Kaseya warns customers of ongoing malspam campaign posing as security updates
Threat actors are conducting a spam campaign aimed at infecting Kaseya customers, posing as legitimate VSA security updates Kaseya is...
CVE-2021-34549
Summary: An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for certain retrieval of circuit data....
CVE-2021-34550
Summary: An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of-bounds memory...
CVE-2021-35331
Summary: ** DISPUTED ** In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crated...
