Home

Watch Out for Malicious Python Packages That Steal Sensitive Data
Gallery
Watch Out for Malicious Python Packages That Steal Sensitive Data

BOTNET, Compromised, Exploitation, Security Advisory, Security Update

Watch Out for Malicious Python Packages That Steal Sensitive Data

Malicious Python packages uploaded by "dsfsdfds" to PyPI stole sensitive data from user systems and sent it to a Telegram bot likely associated with Iraqi cybercriminals. Active since 2022, the [...]

By FHN| July 24th, 2024|BOTNET, Compromised, Exploitation, Security Advisory, Security Update|0 Comments

Attackers Exploit Swap File to Steal Credit Card Information
Gallery
Attackers Exploit Swap File to Steal Credit Card Information

Exploitation, Internet Security, Mobile Security, Security Advisory, Security Update

Attackers Exploit Swap File to Steal Credit Card Information

Researchers at Sucuri recently discovered that website swap files can be exploited to install a persistent credit card skimmer on Magento e-commerce platforms. Swap files, which store overflow data from [...]

By FHN| July 23rd, 2024|Exploitation, Internet Security, Mobile Security, Security Advisory, Security Update|0 Comments

Flaw in Cisco VPN routers enables remote code execution by attackers
Gallery
Flaw in Cisco VPN routers enables remote code execution by attackers

Internet Security, Remote code execution, Security Advisory, Security Update, vulnerability

Flaw in Cisco VPN routers enables remote code execution by attackers

Cisco disclosed a significant flaw in the upload module of RV340 and RV345 VPN routers, allowing remote, authenticated attackers to run arbitrary code. Tracked as CVE-2024-20416 with a CVSS score [...]

By FHN| July 23rd, 2024|Internet Security, Remote code execution, Security Advisory, Security Update, vulnerability|0 Comments

Watch out for fake browser updates installing malicious BOINC software.
Gallery
Watch out for fake browser updates installing malicious BOINC software.

BOTNET, Compromised, Exploitation, malicious cyber actors, Malware, Security Advisory, Security Update

Watch out for fake browser updates installing malicious BOINC software.

Since July 4, 2024, SocGholish (FakeUpdates) has shown new behavior. The infection chain starts with a compromised website prompting a fake browser update. Downloading the update triggers malicious code that [...]

By FHN| July 22nd, 2024|BOTNET, Compromised, Exploitation, malicious cyber actors, Malware, Security Advisory, Security Update|0 Comments

SonicOS IPSec VPN Vulnerability Allows Attackers to Cause DoS Condition
Gallery
SonicOS IPSec VPN Vulnerability Allows Attackers to Cause DoS Condition

Internet Security, malicious cyber actors, Malware, Security Advisory, Security Update, Tips, vulnerability

SonicOS IPSec VPN Vulnerability Allows Attackers to Cause DoS Condition

SonicWall has disclosed a critical heap-based buffer overflow vulnerability in SonicOS IPSec VPN, identified as CVE-2024-40764, which can allow remote attackers to cause a DoS condition. The vulnerability has a [...]