Home

Hackers exploit Autodesk Drive to host weaponized PDF files
Gallery
Hackers exploit Autodesk Drive to host weaponized PDF files

BOTNET, Compromised, Exploitation, Internet Security, malicious cyber actors, Malware, Security Advisory, Security Update

Hackers exploit Autodesk Drive to host weaponized PDF files

Autodesk Drive serves as a cloud-based data-sharing platform for organizations, facilitating document and file sharing. It accommodates various file formats, including 2D and 3D data files such as PDFs, accessible [...]

By FHN| April 26th, 2024|BOTNET, Compromised, Exploitation, Internet Security, malicious cyber actors, Malware, Security Advisory, Security Update|0 Comments

GuptiMiner Exploits eScan to Distribute Miners and Backdoors
Gallery
GuptiMiner Exploits eScan to Distribute Miners and Backdoors

BOTNET, Compromised, Exploitation, IOC's, malicious cyber actors

GuptiMiner Exploits eScan to Distribute Miners and Backdoors

Avast researchers recently uncovered GuptiMiner, an aged malware. It leverages the eScan antivirus update system to surreptitiously implant backdoors and cryptocurrency mining software into users’ computers and extensive corporate networks. [...]

By FHN| April 25th, 2024|BOTNET, Compromised, Exploitation, IOC's, malicious cyber actors|0 Comments

Urgent: GitLab Flaw Allows Account Takeover – Act Now
Gallery
Urgent: GitLab Flaw Allows Account Takeover – Act Now

BOTNET, Exploitation, Internet Security, Security Advisory, Security Update, vulnerability

Urgent: GitLab Flaw Allows Account Takeover – Act Now

GitLab has issued security patches (16.11.1, 16.10.4, and 16.9.6) for both Community and Enterprise Editions, emphasizing the importance of upgrading to these versions to mitigate vulnerabilities. Scheduled bi-monthly patch releases [...]

By FHN| April 25th, 2024|BOTNET, Exploitation, Internet Security, Security Advisory, Security Update, vulnerability|0 Comments

CrushFTP Zero-Day Enables Attackers to Gain Complete Server Access
Gallery
CrushFTP Zero-Day Enables Attackers to Gain Complete Server Access

Tips, Security Advisory, Security Update, vulnerability, Zero Day Attack

CrushFTP Zero-Day Enables Attackers to Gain Complete Server Access

CrushFTP disclosed a zero-day vulnerability (CVE-2024-4040) affecting versions below 10.7.1 and 11.1.0, allowing remote attackers with low privileges to bypass the VFS sandbox and read arbitrary files on the underlying [...]

By FHN| April 24th, 2024|Tips, Security Advisory, Security Update, vulnerability, Zero Day Attack|0 Comments

OpenMetadata Vulnerabilities to Target Kubernetes
Gallery
OpenMetadata Vulnerabilities to Target Kubernetes

Exploitation, Compromised, malicious cyber actors, Security Advisory, Security Update

OpenMetadata Vulnerabilities to Target Kubernetes

The OpenMetadata platform has critical vulnerabilities reported by Microsoft Security Blog, enabling attackers to exploit Kubernetes workloads for crypto mining. Five vulnerabilities facilitate bypassing authentication and executing Remote Code Execution. [...]