Home

New Email Attack Hits Office 365 Users and Delivers Malware
Gallery
New Email Attack Hits Office 365 Users and Delivers Malware

phishing, Internet Security, malicious cyber actors, Malware, Security Advisory, Security Update

New Email Attack Hits Office 365 Users and Delivers Malware

Cybersecurity experts have found a new phishing attack that steals Office 365 credentials and installs malware, putting many organizations at risk. The attack, discovered by Cofense Phishing Defense Center, uses [...]

By FHN| April 9th, 2025|phishing, Internet Security, malicious cyber actors, Malware, Security Advisory, Security Update|0 Comments

Windows Active Directory Flaw Leads to Unauthorized Privilege Escalation
Gallery
Windows Active Directory Flaw Leads to Unauthorized Privilege Escalation

windows, Internet Security, Security Advisory, Security Update, vulnerability

Windows Active Directory Flaw Leads to Unauthorized Privilege Escalation

Microsoft has released an urgent patch for a serious security flaw—CVE-2025-29810—affecting Windows Active Directory Domain Services (AD DS). This vulnerability allows attackers to escalate privileges and potentially take full control [...]

By FHN| April 9th, 2025|windows, Internet Security, Security Advisory, Security Update, vulnerability|0 Comments

Ivanti RCE flaw affects over 5,000 devices
Gallery
Ivanti RCE flaw affects over 5,000 devices

RCE Flaw, Internet Security, Security Advisory, Security Update, vulnerability

Ivanti RCE flaw affects over 5,000 devices

More than 5,000 Ivanti Connect Secure devices remain exposed to a high-risk remote code execution (RCE) vulnerability, CVE-2025-22457, according to data from the Shadowserver Foundation. This flaw, caused by a [...]

By FHN| April 8th, 2025|RCE Flaw, Internet Security, Security Advisory, Security Update, vulnerability|0 Comments

CISA Warns of Active CrushFTP Authentication Bypass Exploit
Gallery
CISA Warns of Active CrushFTP Authentication Bypass Exploit

vulnerability, Exploitation, Internet Security, Security Advisory, Security Update

CISA Warns of Active CrushFTP Authentication Bypass Exploit

CISA has issued a warning about a critical vulnerability (CVE-2025-31161) in CrushFTP that is being actively exploited. This flaw allows attackers to bypass authentication, putting systems at serious risk. The [...]

By FHN| April 8th, 2025|vulnerability, Exploitation, Internet Security, Security Advisory, Security Update|0 Comments

Lazarus Hides Malicious npm Code Using Hex Encoding
Gallery
Lazarus Hides Malicious npm Code Using Hex Encoding

malicious cyber actors, Internet Security, Malware, Security Advisory, Security Update

Lazarus Hides Malicious npm Code Using Hex Encoding

North Korea’s Lazarus Group has ramped up its Contagious Interview campaign by using new npm packages with hex-encoded strings to evade detection. These packages deliver BeaverTail infostealers and RAT loaders, [...]