Home - First Hackers News

Ivanti 0-Day Exploited for DslogdRAT & Web Shell
Gallery
Ivanti 0-Day Exploited for DslogdRAT & Web Shell

Exploitation, Internet Security, Security Advisory, Security Update, Tips

Ivanti 0-Day Exploited for DslogdRAT & Web Shell

Threat actors have exploited a zero-day flaw in Ivanti Connect Secure (CVE-2025-0282) to install a web shell and a remote access trojan (DslogdRAT), according to JPCERT/CC. How DslogdRAT and the [...]

By FHN| April 24th, 2025|Exploitation, Internet Security, Security Advisory, Security Update, Tips|0 Comments

Commvault RCE Exploited, PoC Available
Gallery
Commvault RCE Exploited, PoC Available

BOTNET, Compromised, Exploitation, Internet Security, Security Advisory, Security Update

Commvault RCE Exploited, PoC Available

A major remote code execution (RCE) vulnerability, CVE-2025-34028, has been discovered in Commvault’s on-premise backup and recovery software, posing serious risks to enterprises and managed service providers worldwide. Commvault RCE [...]

By FHN| April 24th, 2025|BOTNET, Compromised, Exploitation, Internet Security, Security Advisory, Security Update|0 Comments

NFC Exploited to Steal Funds from ATMs and POS
Gallery
NFC Exploited to Steal Funds from ATMs and POS

BOTNET, Exploitation, Internet Security, Regulation, Security Advisory, Security Update, Tips

NFC Exploited to Steal Funds from ATMs and POS

NFC Technology Abused in Global ATM and POS Fraud Cybercriminals, mainly from Chinese underground networks, are using NFC (Near Field Communication) technology to carry out large-scale fraud at ATMs and [...]

By FHN| April 23rd, 2025|BOTNET, Exploitation, Internet Security, Regulation, Security Advisory, Security Update, Tips|0 Comments

TP-Link Router Vulnerabilities Enable Malicious SQL Execution
Gallery
TP-Link Router Vulnerabilities Enable Malicious SQL Execution

Internet Security, malicious cyber actors, Security Advisory, Security Update, vulnerability

TP-Link Router Vulnerabilities Enable Malicious SQL Execution

Cybersecurity researchers have found critical SQL injection vulnerabilities in four TP-Link router models, which could allow attackers to bypass authentication, execute malicious commands, and potentially take control of the devices. [...]

By FHN| April 23rd, 2025|Internet Security, malicious cyber actors, Security Advisory, Security Update, vulnerability|0 Comments

Impersonated Dev Tools on npm/PyPI Used for Credential Theft

The Socket Threat Research Team has discovered three malicious open-source packages—two on PyPI and one on npm—designed to steal sensitive cryptocurrency data like mnemonic seed phrases and private keys. These [...]