Exploitation

SSLoad Malware Utilizes MSI Installer to Initiate Delivery Chain gettyimages-1443520646

gettyimages-1443520646

SSLoad Malware Utilizes MSI Installer to Initiate Delivery Chain

FHN June 11, 2024

Malware distributors exploit MSI installers because Windows OS inherently trusts them to run with administrative rights, bypassing...

Biometric Terminal Exposed to QR Code SQL Injection Vulnerability Vulnerability-Management-Program-Best-Practices-1

Vulnerability-Management-Program-Best-Practices-1

Biometric Terminal Exposed to QR Code SQL Injection Vulnerability

FHN June 11, 2024

A popular ZKTeco biometric terminal has critical vulnerabilities, including an SQL injection flaw via QR codes. This...

PoC Exploit Released for Veeam Authentication Bypass Flaw 1680448488398

1680448488398

PoC Exploit Released for Veeam Authentication Bypass Flaw

FHN June 10, 2024

A PoC exploit has been released for the critical Veeam Backup Enterprise Manager authentication bypass vulnerability, CVE-2024-29849,...

Muhstik Malware Attacks Apache RocketMQ for Remote Code Execution Malware,Attack,Warning,On,A,Laptop,Screen.,3d,Rendering

Malware,Attack,Warning,On,A,Laptop,Screen.,3d,Rendering

Muhstik Malware Attacks Apache RocketMQ for Remote Code Execution

FHN June 7, 2024

Apache RocketMQ, a widely used messaging system for handling high volumes of data and critical operations, often...

Fog Ransomware Targets Windows Servers Admins for RDP Logins Arctic-Wolf-Fog-Ransomware

Arctic-Wolf-Fog-Ransomware

Fog Ransomware Targets Windows Servers Admins for RDP Logins

FHN June 6, 2024

The new ‘Fog’ ransomware targets US education and recreation businesses. Attackers used compromised VPN credentials from two...