Exploitation

CrushFTP vulnerability exploited in the wild to execute remote code images (2)

images (2)

CrushFTP vulnerability exploited in the wild to execute remote code

FHN May 9, 2024

A critical vulnerability, CVE-2024-4040, has been actively exploited in the wild in CrushFTP. This flaw permits attackers...

MorLock Ransomware Targets Organizations, Stealing Business Data Ransomware-Report-Photo

Ransomware-Report-Photo

MorLock Ransomware Targets Organizations, Stealing Business Data

FHN May 8, 2024

The MorLock ransomware group has escalated its assaults on Russian businesses, resulting in disruptions and financial setbacks....

XSS Vulnerability in Yoast SEO Plugin Endangers Over 5 Million WordPress Websites wordpress-g74a560834_1280

wordpress-g74a560834_1280

XSS Vulnerability in Yoast SEO Plugin Endangers Over 5 Million WordPress Websites

FHN May 8, 2024

Security researcher Bassem Essam uncovered a critical cross-site scripting (XSS) vulnerability in the widely-used Yoast SEO WordPress...

ShadowSyndicate hackers exploit Aiohttp vulnerability for sensitive data theft 1676273760862

1676273760862

ShadowSyndicate hackers exploit Aiohttp vulnerability for sensitive data theft

FHN May 3, 2024

A directory traversal vulnerability (CVE-2024-23334) in aiohttp versions before 3.9.2 permits remote attackers to access sensitive files...

‘Cuttlefish’ Zero-Click Malware Pilfers Private Cloud Data types-of-malware-image

types-of-malware-image

‘Cuttlefish’ Zero-Click Malware Pilfers Private Cloud Data

FHN May 2, 2024

Cuttlefish is a recently discovered malware platform that has been active since at least July 2023. It...