Over 2000 Magento Online Stores were Hacked
Over 2,000 Magento stores were compromised over the weekend. The private information of thousands of customers has been hacked in the largest automated campaign to date. Dubbed “CardBleed”, it was [...]
“Zerologon” Exploit for Netlogon Remote Protocol
Vulnerability - CVE-2020-1472 Description: An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC), [...]
Porn Sites redirecting to Exploit Kits – Malsmoke Group
A cybercrime group named Malsmoke has been targeting porn sites with malicious ads redirecting users to exploit kits. Over the past few months, a hacker group dubbed Malsmoke has been [...]
O365 Phishing Attack – Performs Real-Time Active Directory (AD) Authentication
Attackers got an eye on the Victims O365 credentials in real-time as they enter their credentials into the phishing page, by using Authentication API's. Authentication API: The processes of certifying [...]
Attackers targeted Data Center giant Equinix
Data center giant Equinix has been hit by a ransomware attack. Equinix, one of the world's largest providers of on-demand colocation data centers. Equinix has released a short statement published [...]
BLURtooth Vulnerability
BLURtooth, is referred to the vulnerability for the devices supporting Bluetooth BR/EDR(Bluetooth Basic Rate/ Enhanced Data Rate) and LE(Bluetooth in Low Energy) using Cross-Transport Key Derivation (CTKD) for pairing to [...]
Microsoft Patch Tuesday
Patch Tuesday:- The second Tuesday of each month is the one most commonly referred to as Patch Tuesday. That's when Microsoft releases security-related updates for Windows (desktop and server editions), Office, and related products. The [...]
Ransomware frozen Argentina’s Borders
Argentina's official immigration agency, Dirección Nacional de Migraciones, suffered a Netwalker ransomware attack that temporarily halted for 4 hours of the border crossing into and out of the country. Netwalker [...]
ProLock Ransomware
What is ProLock? Discovered by PeterM, ProLock is a rebranded version of PwndLocker ransomware. This ransomware encrypts files with the RSA-2048 algorithm, modifies filenames, and creates a ransom message. ProLock [...]
Another Twitter Account Hack – This time its India’s Prime Minister
On July, there was massive Twitter security breach of 130 high-profiles like US presidential hopeful Joe Biden, Tesla founder Elon Musk and Microsoft founder Bill Gates. This Time, India's Modi [...]
Norway’s Parliament Hit by Email Attack
Norway parliament's non-elected chief administrator - Marianne Andreassen said that "This has been a significant attack" The Norwegian parliament suffered a cyber attack during the past week and the e-mail [...]
VMware RabbitMQ – Security Update
VMware RabbitMQ Arbitrary Code Execution Vulnerability Short Summary:A code execution vulnerability was found in VMware RabbitMQ. The vulnerability is caused due to a Windows-specific binary planting security flaw. This vulnerability [...]
Magecart Credit-Card Skimmer
Magecart Group:- Magecart is a consortium of malicious hacker groups who target online shopping cart systems, usually the Magento system, to steal customer payment card information. This is known as [...]
Cisco IOS XR Software – Security Vulnerability
Short Summary Multiple vulnerabilities were found in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software. The vulnerabilities are caused due to insufficient queue management for [...]
Red Hat CloudForms – 2020:3574 – Security Advisory
Type/Severity Security Advisory: Critical Topic An update is now available for CloudForms Management Engine 5.10. Description A high severity vulnerability was found in all active versions of Red Hat CloudForms [...]
The new Red Dawn Template – Emotet
Emotet Trojan:- Emotet is a Trojan that is primarily spread through spam emails (malspam). The infection may arrive either via malicious script, macro-enabled document files, or malicious link. Emotet emails may contain familiar branding designed [...]
Power of Honesty Saved Tesla
Have you invested millions of dollars on your security devices? Better spend half for your employer's. The following realistic honesty will let you know why... All tesla rockets are not [...]
The Return of Qbot Trojan
What is a Malware? Malware is any software intentionally designed to cause damage to a computer, server, client, or computer network. A wide variety of malware types exist, including computer [...]
Fedora Security Patch Update
Name : chromium Product : Fedora 31 Version : 84.0.4147.89 Release : 1.fc31 URL : http://www.chromium.org/Home Summary : A WebKit (Blink) powered web browser Description : Chromium is an open-source [...]
Security Update – IBM Security Guardium
IBM Security Guardium Insights is affected by an Open Redirect vulnerability Summary IBM Security Guardium Insights has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-4598 DESCRIPTION: IBM Security Guardium Insights [...]
Security Update – IBM Elastic Storager Server
A vulnerability has been identified in IBM Elastic Storager Server where an attacker can cause a denial of service (CVE-2020-4383) Summary A security vulnerability has been identified in all levels of [...]
Lazarus LinkedIn Job Offer- IOC’s Available To Protect
Lazarus Group who are known as APT38 enact themselves as a Job recruitment division for the US Defence Center. Now they are using LinkedIn and targeting the recipients profile by [...]
Get Social