CVE-2021-36213
Summary: HashiCorp Consul and Consul Enterprise 1.9.0 through 1.10.0 default deny policy with a single L7 application-aware intention deny action...
CVE-2020-36423
Summary: An issue was discovered in Arm Mbed TLS before 2.23.0. A remote attacker can recover plaintext because a certain...
CVE-2020-36426
Summary: An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte). Reference...
CVE-2021-34675
Summary: Basix NEX-Forms through 7.8.7 allows authentication bypass for stored PDF reports. Reference Links(if available): https://github.com/rauschecker/CVEs/tree/main/CVE-2021-34675 http://basixonline.net/nex-forms-wordpress-form-builder-demo/change-log/ CVSS Score (if...
CVE-2021-34676
Summary: Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation. Reference Links(if available): https://github.com/rauschecker/CVEs/tree/main/CVE-2021-34676 http://basixonline.net/nex-forms-wordpress-form-builder-demo/change-log/ CVSS Score (if...
Step by step guide on Setting up NordLynx Wireguard VPN in PfSense
IF you already use NordVPN, you will be well aware that they refuse to give out the WireGuard config information...
BlackMatter, a new ransomware group, claims link to DarkSide, REvil
There’s a new ransomware gang in town—and, frankly, we’re not at all surprised. After DarkSide disappeared—coincidentally, immediately after Colonial Pipeline...
The Olympics: a timeline of scams, hacks, and malware
The 2020 Olympics are, after a bit of a delayed start, officially in full swing. So too is the possibility...
UDP Technology IP Camera firmware vulnerabilities allow for attacker to achieve root
Researchers at RandoriSec have found serious vulnerabilities in the firmware provided by UDP Technology to Geutebrück and many other IP...
Signal Patches Zero-Day Bug in its Android App
Signal has patched a critical flaw in its Android app that, in some circumstances, sent random unintended images to contacts...
Cyberattacks Zero in Tokyo Olympics as Games Begin
Malicious malware and websites have targeted both event organizers and regular spectators as the Tokyo Olympics' opening ceremony approaches. According to...
Hackers Applying HTML Smuggling To Distribute Malware
Another latest spam E-mail operation, which abused a technique named "HTML smuggling" to circumvent E-mail security measures and transmit malware...
Fake Windows 11 Installers are Being Used to Spread Malware
Although Windows 11 isn't expected to be released until later this year, hackers have already begun attempting to use it...
DDoS attacks in Q2 2021
News overview In terms of big news, Q2 2021 was relatively calm, but not completely eventless. For example, April saw the...
CredPhish – A PowerShell Script Designed To Invoke Legitimate Credential Prompts And Exfiltrate Passwords Over DNS
CredPhish is a PowerShell script designed to invoke credential prompts and exfiltrate passwords. It relies on CredentialPicker to collect user...
LoGiC.NET – A More Advanced Free And Open .NET Obfuscator Using Dnlib
LoGiC.NET is a free and open-source .NET obfuscator that uses dnlib for folks that want to see how obfuscation works...
IBM Cost of a Data Breach study: average Cost of Data Breach exceeds $4.2M
The ‘Cost of a Data Breach’ report commissioned by IBM Security states that the cost of a data breach exceeded...
BlackMatter ransomware group claims to be Darkside and REvil succesor
BlackMatter ransomware gang, a new threat actor appears in the threat landscape and claims to combine TTPs of Darkside and...
Flaws in Zimbra could allow to takeover webmail server of a targeted organization
Researchers discovered flaws in Zimbra email collaboration software that could allow attackers to compromise email accounts by sending a malicious...
Kaseya Unitrends has unpatched vulnerabilities that could help attackers expand a breach
It must not be easy to work at Kaseya right now. While they are working as hard as they can...
The Clubhouse database “breach” is likely a non-breach. Here’s why.
Before the work week ended last week Friday, a security researcher found a leak of what is claimed to be...
Mobile County Officials Informs County Employees of Data Breach
The officials of Mobile County in southwest Alabama, have finally notified county employees of a computer system breach that compromised...
Q2 2021 Report by Digital Shadow, Abridged
Q2 2021 was among the most important ransomware periods, with several significant events taking place. Humans witnessed one of the...
WhatsApp CEO: US Allies’ National Security Officials Targeted with NSO Malware
According to WhatsApp CEO Will Cathcart, governments used NSO group malware to target high-ranking government officials all around the world. Cathcart...
