Home

F5 Released Hotfixes for BIG-IP and iControl REST Vulnerabilities
Gallery
F5 Released Hotfixes for BIG-IP and iControl REST Vulnerabilities

vulnerability, Arbitrary Code Execution, Compromised, Internet Security, malicious cyber actors, Security Advisory, Security Update

F5 Released Hotfixes for BIG-IP and iControl REST Vulnerabilities

The vulnerability CVE-2022-41622 makes BIG-IP and BIG-IQ vulnerable to unauthenticated remote code execution (RCE) via cross-site request forgery due to Big-IP’s SOAP API lacking CSRF protection and other protective measures. CVE-2022-41622 and CVE-2022-41800 Vulnerabilities An attacker may trick [...]

By FHN| November 17th, 2022|vulnerability, Arbitrary Code Execution, Compromised, Internet Security, malicious cyber actors, Security Advisory, Security Update|0 Comments

Critical vulnerability in Spotify’s Backstage discovered, patched
Gallery
Critical vulnerability in Spotify’s Backstage discovered, patched

vulnerability, Compromised, Exploitation, Internet Security, Security Advisory, Security Update

Critical vulnerability in Spotify’s Backstage discovered, patched

A critical unauthenticated remote code execution vulnerability in Spotify’s Backstage project has been found and fixed, and developers are advised to take immediate action in their environments. What is all [...]

By FHN| November 16th, 2022|vulnerability, Compromised, Exploitation, Internet Security, Security Advisory, Security Update|0 Comments

Windows Kerberos authentication breaks after November updates
Gallery
Windows Kerberos authentication breaks after November updates

Microsoft, Compromised, Internet Security, malicious cyber actors, Malware, Security Advisory, Security Update, vulnerability

Windows Kerberos authentication breaks after November updates

Microsoft on Sunday reported that after installing updates released on the most recent Patch Tuesday on Nov. 8, security teams might have issues with Kerberos authentication on Windows Servers with [...]

By FHN| November 15th, 2022|Microsoft, Compromised, Internet Security, malicious cyber actors, Malware, Security Advisory, Security Update, vulnerability|0 Comments

Over 15,000 WordPress Sites Compromised in Malicious SEO Campaign
Gallery
Over 15,000 WordPress Sites Compromised in Malicious SEO Campaign

Microsoft, Compromised, Internet Security, IOC's, Mobile Security, Security Advisory, Security Update

Over 15,000 WordPress Sites Compromised in Malicious SEO Campaign

Security researchers have spotted an intriguing malware campaign designed to increase the search engine rankings of spam websites under the control of threat actors. Over 15,000 WordPress and other sites have [...]

By FHN| November 15th, 2022|Microsoft, Compromised, Internet Security, IOC's, Mobile Security, Security Advisory, Security Update|0 Comments

New “Earth Longzhi” APT Targets Ukraine and Asian Countries with Custom Cobalt Strike Loaders
Gallery
New “Earth Longzhi” APT Targets Ukraine and Asian Countries with Custom Cobalt Strike Loaders

Malware, Internet Security, IOC's, malicious cyber actors, Mobile Security, Security Advisory, Security Update

New “Earth Longzhi” APT Targets Ukraine and Asian Countries with Custom Cobalt Strike Loaders

A new APT group, Earth Longzhi, reportedly targeted organizations in East Asia, Southeast Asia, and Ukraine using a Cobalt Strike loader. The group, active since at least 2020, is considered [...]