Home

Urgent: GitLab Flaw Allows Account Takeover – Act Now
Gallery
Urgent: GitLab Flaw Allows Account Takeover – Act Now

BOTNET, Exploitation, Internet Security, Security Advisory, Security Update, vulnerability

Urgent: GitLab Flaw Allows Account Takeover – Act Now

GitLab has issued security patches (16.11.1, 16.10.4, and 16.9.6) for both Community and Enterprise Editions, emphasizing the importance of upgrading to these versions to mitigate vulnerabilities. Scheduled bi-monthly patch releases [...]

By FHN| April 25th, 2024|BOTNET, Exploitation, Internet Security, Security Advisory, Security Update, vulnerability|0 Comments

CrushFTP Zero-Day Enables Attackers to Gain Complete Server Access
Gallery
CrushFTP Zero-Day Enables Attackers to Gain Complete Server Access

Tips, Security Advisory, Security Update, vulnerability, Zero Day Attack

CrushFTP Zero-Day Enables Attackers to Gain Complete Server Access

CrushFTP disclosed a zero-day vulnerability (CVE-2024-4040) affecting versions below 10.7.1 and 11.1.0, allowing remote attackers with low privileges to bypass the VFS sandbox and read arbitrary files on the underlying [...]

By FHN| April 24th, 2024|Tips, Security Advisory, Security Update, vulnerability, Zero Day Attack|0 Comments

OpenMetadata Vulnerabilities to Target Kubernetes
Gallery
OpenMetadata Vulnerabilities to Target Kubernetes

Exploitation, Compromised, malicious cyber actors, Security Advisory, Security Update

OpenMetadata Vulnerabilities to Target Kubernetes

The OpenMetadata platform has critical vulnerabilities reported by Microsoft Security Blog, enabling attackers to exploit Kubernetes workloads for crypto mining. Five vulnerabilities facilitate bypassing authentication and executing Remote Code Execution. [...]

By FHN| April 23rd, 2024|Exploitation, Compromised, malicious cyber actors, Security Advisory, Security Update|0 Comments

Critical Oracle VirtualBox vulnerability now has a PoC exploit released
Gallery
Critical Oracle VirtualBox vulnerability now has a PoC exploit released

Compromised, Exploitation, Security Advisory, Security Update, vulnerability

Critical Oracle VirtualBox vulnerability now has a PoC exploit released

Oracle VirtualBox had a critical vulnerability (CVE-2024-21111) allowing Privilege Escalation and Arbitrary File Move/Delete, rated 7.8 (High). Oracle promptly patched it and issued a security advisory. Oracle released a security [...]

By FHN| April 23rd, 2024|Compromised, Exploitation, Security Advisory, Security Update, vulnerability|0 Comments

Watch Out for Weaponized Zip Files Distributing WINELOADER Malware
Gallery
Watch Out for Weaponized Zip Files Distributing WINELOADER Malware

BOTNET, Compromised, Exploitation, Internet Security, malicious cyber actors, Malware, Mobile Security, Security Advisory, Security Update

Watch Out for Weaponized Zip Files Distributing WINELOADER Malware

Russian threat group APT29 targeted German political parties with a new backdoor, WINELOADER, via spear-phishing emails containing malicious links to ZIP files on compromised websites. These ZIP files deployed an [...]