Home - First Hackers News

CrushFTP Zero-Day Enables Attackers to Gain Complete Server Access
Gallery
CrushFTP Zero-Day Enables Attackers to Gain Complete Server Access

Security Advisory, Security Update, Tips, vulnerability, Zero Day Attack

CrushFTP Zero-Day Enables Attackers to Gain Complete Server Access

CrushFTP disclosed a zero-day vulnerability (CVE-2024-4040) affecting versions below 10.7.1 and 11.1.0, allowing remote attackers with low privileges to bypass the VFS sandbox and read arbitrary files on the underlying [...]

By FHN| April 24th, 2024|Security Advisory, Security Update, Tips, vulnerability, Zero Day Attack|0 Comments

OpenMetadata Vulnerabilities to Target Kubernetes
Gallery
OpenMetadata Vulnerabilities to Target Kubernetes

Compromised, Exploitation, malicious cyber actors, Security Advisory, Security Update

OpenMetadata Vulnerabilities to Target Kubernetes

The OpenMetadata platform has critical vulnerabilities reported by Microsoft Security Blog, enabling attackers to exploit Kubernetes workloads for crypto mining. Five vulnerabilities facilitate bypassing authentication and executing Remote Code Execution. [...]

By FHN| April 23rd, 2024|Compromised, Exploitation, malicious cyber actors, Security Advisory, Security Update|0 Comments

Critical Oracle VirtualBox vulnerability now has a PoC exploit released
Gallery
Critical Oracle VirtualBox vulnerability now has a PoC exploit released

Compromised, Exploitation, Security Advisory, Security Update, vulnerability

Critical Oracle VirtualBox vulnerability now has a PoC exploit released

Oracle VirtualBox had a critical vulnerability (CVE-2024-21111) allowing Privilege Escalation and Arbitrary File Move/Delete, rated 7.8 (High). Oracle promptly patched it and issued a security advisory. Oracle released a security [...]

By FHN| April 23rd, 2024|Compromised, Exploitation, Security Advisory, Security Update, vulnerability|0 Comments

Watch Out for Weaponized Zip Files Distributing WINELOADER Malware
Gallery
Watch Out for Weaponized Zip Files Distributing WINELOADER Malware

BOTNET, Compromised, Exploitation, Internet Security, malicious cyber actors, Malware, Mobile Security, Security Advisory, Security Update

Watch Out for Weaponized Zip Files Distributing WINELOADER Malware

Russian threat group APT29 targeted German political parties with a new backdoor, WINELOADER, via spear-phishing emails containing malicious links to ZIP files on compromised websites. These ZIP files deployed an [...]

By FHN| April 22nd, 2024|BOTNET, Compromised, Exploitation, Internet Security, malicious cyber actors, Malware, Mobile Security, Security Advisory, Security Update|0 Comments

PyPI Package Malware Targets Discord Users for Credential Theft
Gallery
PyPI Package Malware Targets Discord Users for Credential Theft

Internet Security, malicious cyber actors, Malware, Mobile Security, Security Advisory, Security Update

PyPI Package Malware Targets Discord Users for Credential Theft

Hackers frequently exploit PyPI packages to inject malicious code into widely-used Python libraries, seeking vulnerabilities. Recently, FortiGuard Labs cybersecurity researchers uncovered a malicious PyPI package, "discordpy_bypass-1.7," targeting Discord users for [...]