Home

GitLab Patches Critical HTML Injection Flaw Allowing XSS Attacks
Gallery
GitLab Patches Critical HTML Injection Flaw Allowing XSS Attacks

vulnerability, BOTNET, Compromised, Internet Security, Security Advisory, Security Update

GitLab Patches Critical HTML Injection Flaw Allowing XSS Attacks

GitLab released patches (17.5.1, 17.4.3, and 17.3.6) for both Community and Enterprise Editions, fixing a critical HTML injection vulnerability in the Global Search feature that could lead to XSS attacks, [...]

By FHN| October 24th, 2024|vulnerability, BOTNET, Compromised, Internet Security, Security Advisory, Security Update|0 Comments

Lazarus APT Hackers Exploit Chrome Zero-Day via Crypto Game
Gallery
Lazarus APT Hackers Exploit Chrome Zero-Day via Crypto Game

Security Update, BOTNET, Compromised, Exploitation, Security Advisory, Zero Day Attack

Lazarus APT Hackers Exploit Chrome Zero-Day via Crypto Game

Lazarus APT exploited a Chrome zero-day using a crypto-themed game as bait, showcasing the group’s evolving financial tactics and social engineering. On May 13, 2024, Kaspersky detected a new infection [...]

By FHN| October 23rd, 2024|Security Update, BOTNET, Compromised, Exploitation, Security Advisory, Zero Day Attack|0 Comments

Critical Vulnerabilities Found in VMware vCenter Server
Gallery
Critical Vulnerabilities Found in VMware vCenter Server

vulnerability, Exploitation, Internet Security, Security Advisory, Security Update, Tips

Critical Vulnerabilities Found in VMware vCenter Server

Broadcom has issued critical security updates for severe vulnerabilities in VMware vCenter Server that allow remote code execution and privilege escalation. The flaws, CVE-2024-38812 and CVE-2024-38813, impact multiple versions of [...]

By FHN| October 22nd, 2024|vulnerability, Exploitation, Internet Security, Security Advisory, Security Update, Tips|0 Comments

Callback Phishing Targets Login Credentials via Google Groups
Gallery
Callback Phishing Targets Login Credentials via Google Groups

phishing, BOTNET, Compromised, Exploitation, malicious cyber actors, Security Advisory, Security Update

Callback Phishing Targets Login Credentials via Google Groups

Phishing attacks trick individuals into revealing sensitive info by impersonating trusted entities, often through urgent emails with malicious links or attachments. Trustwave analysts recently warned of Callback Phishing attacks using [...]

By FHN| October 22nd, 2024|phishing, BOTNET, Compromised, Exploitation, malicious cyber actors, Security Advisory, Security Update|0 Comments

Over 10 million personal and corporate devices hit by information stealers
Gallery
Over 10 million personal and corporate devices hit by information stealers

Compromised, BOTNET, Exploitation, Internet Security, Security Advisory, Security Update, Tips

Over 10 million personal and corporate devices hit by information stealers

Kaspersky reports nearly 10 million personal and corporate devices were compromised by data-stealing malware in 2023, a 643% rise in three years. Information stealers, which collect sensitive data like login [...]