Page 45

[ad_1] New Krasue Linux RAT targets telecom companies in Thailand Pierluigi Paganini December 07, 2023 A previously undetected Linux RAT dubbed Krasue has been observed targeting telecom companies in Thailand. Group-IB researchers discovered a previously undetected Linux remote access trojan called Krasue has been employed... Continue reading

[ad_1] GST Invoice Billing Inventory exposes sensitive data to threat actors Pierluigi Paganini December 06, 2023 GST Invoice Billing Inventory, a business accounting app for small and medium businesses with over 1M downloads has left a database open, exposing sensitive personal and corporate data up... Continue reading

[ad_1] CISA adds Qualcomm flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini December 06, 2023 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds four Qualcomm vulnerabilities to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Qualcomm vulnerabilities to its Known Exploited... Continue reading

[ad_1] Atlassian addressed four new RCE flaws in its products Pierluigi Paganini December 06, 2023 Australian Software giant Atlassian addressed four critical Remote Code Execution (RCE) vulnerabilities in its products. Atlassian released security patches to address four critical remote code execution vulnerabilities in its products. Below is the... Continue reading

[ad_1] Experts demonstrate a post-exploitation tampering technique to display Fake Lockdown mode Pierluigi Paganini December 06, 2023 Researchers devised a new post-exploitation tampering technique to trick users into believing that their iPhone is in Lockdown Mode. Researchers from Jamf Threat Labs devised a new post-exploit... Continue reading

[ad_1] Google fixed critical zero-click RCE in Android Pierluigi Paganini December 05, 2023 Google fixed a critical zero-click RCE vulnerability (CVE-2023-40088) with the release of the December 2023 Android security updates. Google December 2023 Android security updates addressed 85 vulnerabilities, including a critical zero-click remote... Continue reading

[ad_1] Threat actors breached US govt systems by exploiting Adobe ColdFusion flaw Pierluigi Paganini December 06, 2023 The U.S. CISA warns that threat actors are actively exploiting a critical vulnerability in Adobe ColdFusion to breach government agencies. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)... Continue reading

[ad_1] Russia-linked APT28 group spotted exploiting Outlook flaw to hijack MS Exchange accounts Pierluigi Paganini December 05, 2023 Microsoft warns that the Russia-linked APT28 group is actively exploiting the CVE-2023-23397 Outlook flaw to hijack Microsoft Exchange accounts. Microsoft’s Threat Intelligence is warning of Russia-linked cyber-espionage... Continue reading

[ad_1] ENISA published ENISA Threat Landscape for DoS Attacks Pierluigi Paganini December 05, 2023 ENISA published the ENISA Threat Landscape for DoS Attacks report to bring new insights to the DoS threat landscape. Denial-of-Service (DoS) attacks pose a persistent and significant security risk for organizations.... Continue reading