Home

GuptiMiner Exploits eScan to Distribute Miners and Backdoors
Gallery
GuptiMiner Exploits eScan to Distribute Miners and Backdoors

BOTNET, Compromised, Exploitation, IOC's, malicious cyber actors

GuptiMiner Exploits eScan to Distribute Miners and Backdoors

Avast researchers recently uncovered GuptiMiner, an aged malware. It leverages the eScan antivirus update system to surreptitiously implant backdoors and cryptocurrency mining software into users’ computers and extensive corporate networks. [...]

By FHN| April 25th, 2024|BOTNET, Compromised, Exploitation, IOC's, malicious cyber actors|0 Comments

Urgent: GitLab Flaw Allows Account Takeover – Act Now
Gallery
Urgent: GitLab Flaw Allows Account Takeover – Act Now

BOTNET, Exploitation, Internet Security, Security Advisory, Security Update, vulnerability

Urgent: GitLab Flaw Allows Account Takeover – Act Now

GitLab has issued security patches (16.11.1, 16.10.4, and 16.9.6) for both Community and Enterprise Editions, emphasizing the importance of upgrading to these versions to mitigate vulnerabilities. Scheduled bi-monthly patch releases [...]

By FHN| April 25th, 2024|BOTNET, Exploitation, Internet Security, Security Advisory, Security Update, vulnerability|0 Comments

CrushFTP Zero-Day Enables Attackers to Gain Complete Server Access
Gallery
CrushFTP Zero-Day Enables Attackers to Gain Complete Server Access

Tips, Security Advisory, Security Update, vulnerability, Zero Day Attack

CrushFTP Zero-Day Enables Attackers to Gain Complete Server Access

CrushFTP disclosed a zero-day vulnerability (CVE-2024-4040) affecting versions below 10.7.1 and 11.1.0, allowing remote attackers with low privileges to bypass the VFS sandbox and read arbitrary files on the underlying [...]

By FHN| April 24th, 2024|Tips, Security Advisory, Security Update, vulnerability, Zero Day Attack|0 Comments

OpenMetadata Vulnerabilities to Target Kubernetes
Gallery
OpenMetadata Vulnerabilities to Target Kubernetes

Exploitation, Compromised, malicious cyber actors, Security Advisory, Security Update

OpenMetadata Vulnerabilities to Target Kubernetes

The OpenMetadata platform has critical vulnerabilities reported by Microsoft Security Blog, enabling attackers to exploit Kubernetes workloads for crypto mining. Five vulnerabilities facilitate bypassing authentication and executing Remote Code Execution. [...]

By FHN| April 23rd, 2024|Exploitation, Compromised, malicious cyber actors, Security Advisory, Security Update|0 Comments

Critical Oracle VirtualBox vulnerability now has a PoC exploit released
Gallery
Critical Oracle VirtualBox vulnerability now has a PoC exploit released

Compromised, Exploitation, Security Advisory, Security Update, vulnerability

Critical Oracle VirtualBox vulnerability now has a PoC exploit released

Oracle VirtualBox had a critical vulnerability (CVE-2024-21111) allowing Privilege Escalation and Arbitrary File Move/Delete, rated 7.8 (High). Oracle promptly patched it and issued a security advisory. Oracle released a security [...]