Home

Magento Carding Attack Leverages Fake GIFs and Proxy Malware
Gallery
Magento Carding Attack Leverages Fake GIFs and Proxy Malware

malicious cyber actors, Internet Security, Malware, Security Advisory, Security Update

Magento Carding Attack Leverages Fake GIFs and Proxy Malware

A multi-stage carding attack targeted a Magento eCommerce site running outdated version 1.9.2.4, unsupported since June 2020. Unpatched flaws allowed malware to use a fake .gif file, tamper with browser [...]

By FHN| April 28th, 2025|malicious cyber actors, Internet Security, Malware, Security Advisory, Security Update|0 Comments

Defender XDR False Positive Leaked 1700+ Docs
Gallery
Defender XDR False Positive Leaked 1700+ Docs

Microsoft, Internet Security, Security Advisory, Security Update

Defender XDR False Positive Leaked 1700+ Docs

A significant data leak involving Microsoft Defender XDR exposed over 1,700 sensitive documents from many organizations, triggered by a critical false positive error. The incident was first identified by security [...]

By FHN| April 25th, 2025|Microsoft, Internet Security, Security Advisory, Security Update|0 Comments

Chrome UAF Vulnerabilities: Active Exploits
Gallery
Chrome UAF Vulnerabilities: Active Exploits

vulnerability, Exploitation, Internet Security, Security Advisory, Security Update

Chrome UAF Vulnerabilities: Active Exploits

Researchers discovered two critical UAF vulnerabilities in Chrome, actively exploited in the wild, but Google’s MiraclePtr defense has now blocked them, strengthening browser security. All about the Chrome UAF vulnerability [...]

By FHN| April 25th, 2025|vulnerability, Exploitation, Internet Security, Security Advisory, Security Update|0 Comments

Ivanti 0-Day Exploited for DslogdRAT & Web Shell
Gallery
Ivanti 0-Day Exploited for DslogdRAT & Web Shell

Exploitation, Internet Security, Security Advisory, Security Update, Tips

Ivanti 0-Day Exploited for DslogdRAT & Web Shell

Threat actors have exploited a zero-day flaw in Ivanti Connect Secure (CVE-2025-0282) to install a web shell and a remote access trojan (DslogdRAT), according to JPCERT/CC. How DslogdRAT and the [...]

By FHN| April 24th, 2025|Exploitation, Internet Security, Security Advisory, Security Update, Tips|0 Comments

Commvault RCE Exploited, PoC Available
Gallery
Commvault RCE Exploited, PoC Available

Exploitation, BOTNET, Compromised, Internet Security, Security Advisory, Security Update

Commvault RCE Exploited, PoC Available

A major remote code execution (RCE) vulnerability, CVE-2025-34028, has been discovered in Commvault’s on-premise backup and recovery software, posing serious risks to enterprises and managed service providers worldwide. Commvault RCE [...]