Home

SSRF Vulnerabilities Targeted by 400+ IPs in Coordinated Attack
Gallery
SSRF Vulnerabilities Targeted by 400+ IPs in Coordinated Attack

vulnerability, Exploitation, Internet Security, Security Advisory, Security Update, Tips

SSRF Vulnerabilities Targeted by 400+ IPs in Coordinated Attack

GreyNoise has reported a coordinated wave of attacks exploiting Server-Side Request Forgery (SSRF) vulnerabilities across various platforms. According to the firm, over 400 IP addresses were identified actively targeting multiple [...]

By FHN| March 14th, 2025|vulnerability, Exploitation, Internet Security, Security Advisory, Security Update, Tips|0 Comments

Juniper Junos OS Vulnerability Exploited, CISA Warns
Gallery
Juniper Junos OS Vulnerability Exploited, CISA Warns

Exploitation, BOTNET, Compromised, Internet Security, Security Advisory, Security Update, vulnerability

Juniper Junos OS Vulnerability Exploited, CISA Warns

CISA has warned about a Junos OS vulnerability (CVE-2025-21590) in Juniper Networks. This flaw allows high-privileged local attackers to inject code, risking system compromise. It stems from weak security restrictions [...]

By FHN| March 14th, 2025|Exploitation, BOTNET, Compromised, Internet Security, Security Advisory, Security Update, vulnerability|0 Comments

DCRat Malware Uses YouTube for Credential Theft
Gallery
DCRat Malware Uses YouTube for Credential Theft

Malware, Internet Security, malicious cyber actors, Security Advisory, Security Update

DCRat Malware Uses YouTube for Credential Theft

In 2025, a new wave of DCRat backdoor attacks has emerged, using the Malware-as-a-Service (MaaS) model. Cybercriminals behind this campaign distribute the malware and offer technical support and infrastructure for [...]

By FHN| March 13th, 2025|Malware, Internet Security, malicious cyber actors, Security Advisory, Security Update|0 Comments

PHP XXE Vulnerability Exposes Config Files and Private Keys
Gallery
PHP XXE Vulnerability Exposes Config Files and Private Keys

vulnerability, Internet Security, Security Advisory, Security Update

PHP XXE Vulnerability Exposes Config Files and Private Keys

A newly discovered XML External Entity (XXE) injection vulnerability in PHP allows attackers to bypass security measures and access sensitive configuration files and private keys. PHP XXE Vulnerability Web security [...]

By FHN| March 12th, 2025|vulnerability, Internet Security, Security Advisory, Security Update|0 Comments

CISA Warns of Windows Win32 Kernel Vulnerability
Gallery
CISA Warns of Windows Win32 Kernel Vulnerability

vulnerability, Internet Security, Malware, Security Advisory, Security Update, windows

CISA Warns of Windows Win32 Kernel Vulnerability

CISA has warned about a critical Windows Win32 kernel vulnerability, identified as CVE-2025-24983. This use-after-free flaw in the Win32k component could let authorized attackers gain elevated privileges. It falls under [...]