GitLab Zero-Click Account Hijack Vulnerability Revealed
On January 11, 2024, GitLab issued an update containing a crucial security fix for a vulnerability. This flaw enables a user to send the account password reset form to an [...]
Windows SmartScreen Bypass Exploited by Information Stealer
The malicious campaign leverages the CVE-2023-36025 vulnerability in Microsoft Windows Defender SmartScreen to propagate Phemedrone Stealer. Employing sophisticated evasion techniques, it evades conventional security measures to target sensitive user information. [...]
-
Researchers identify FBot hacking tool hijacking cloud and payment services. GalleryResearchers identify FBot hacking tool hijacking cloud and payment services.
BOTNET, Compromised, cyberattack, Darknet, Evilproxy, Exploitation, Internet Security, IOC's, malicious cyber actors, Mobile Security, Security Advisory, Security Update
Researchers identify FBot hacking tool hijacking cloud and payment services.
SentinelOne's malware hunters flagged a recently uncovered Python-based hacking tool employed by cybercriminals to hijack cloud platforms and payment services. FBot hacking tool hijacking cloud and payment services The tool, [...]
-
High Severity Vulnerability in Cisco Unity Connection Could Enable Root Privileges (CVE-2024-20272) GalleryHigh Severity Vulnerability in Cisco Unity Connection Could Enable Root Privileges (CVE-2024-20272)
Exploitation, cisco, Internet Security, malicious cyber actors, Security Advisory, Security Update, vulnerability
High Severity Vulnerability in Cisco Unity Connection Could Enable Root Privileges (CVE-2024-20272)
Cisco has successfully addressed a high-severity security vulnerability in Unity Connection. This flaw had the potential to allow unauthenticated attackers to upload malicious files, execute arbitrary commands, and acquire root [...]
-
Volexity detects Chinese hackers exploiting zero-day vulnerabilities in Ivanti VPN. GalleryVolexity detects Chinese hackers exploiting zero-day vulnerabilities in Ivanti VPN.
BOTNET, Compromised, Exploitation, Internet Security, IOC's, malicious cyber actors, Security Advisory, Security Update, vulnerability, Zero Day Attack
Volexity detects Chinese hackers exploiting zero-day vulnerabilities in Ivanti VPN.
On Wednesday, cybersecurity researchers at Volexity issued a warning, revealing that suspected Chinese nation-state hackers are currently exploiting two unauthenticated remote zero-day vulnerabilities in Ivanti Connect Secure VPN devices. Zero-days [...]
FHN 
