Alert: CISA warns of three actively exploited vulnerabilities
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding three critical vulnerabilities that are currently being exploited in the wild. These vulnerabilities affect widely used...
Quad7 Botnet: expanding threat landscape targets routers and VPNs
The Quad7 botnet, also known as the 7777 and xlogin botnets, has gained notoriety for utilizing compromised routers to launch attacks on Microsoft 365 accounts. This sophisticated botnet...
GeoServer RCE vulnerability: a threat to geospatial data infrastructure
GeoServer, an open-source Java-based server, enables the sharing and management of geospatial data. However, a critical vulnerability (CVE-2024-36401) has emerged, allowing attackers to remotely execute commands and deploy...
Veeam software vulnerabilities: urgent action required for enhanced cybersecurity
Veeam Software, a renowned provider of data protection solutions, has recently disclosed the discovery of several critical and high-severity vulnerabilities in multiple products. These vulnerabilities pose significant risks...
SonicWall alerts to critical access control flaw actively targeted
As a cybersecurity expert, I’m here to alert you to a critical vulnerability (CVE-2024-40766) affecting SonicWall Firewall products. This improper access control flaw is actively being exploited in...
Persistent backdoors via Linux pluggable authentication modules: a new threat
Recent research by the Group-IB Digital Forensics and Incident Response (DFIR) team has revealed a novel technique exploiting Linux’s Pluggable Authentication Modules (PAM) to create persistent backdoors on...
Critical Progress LoadMaster vulnerability: unauthenticated code execution
A severe vulnerability (CVE-2024-7591) has been discovered in the Progress LoadMaster product line, including all releases and the Multi-Tenant (MT) hypervisor. This flaw allows unauthenticated remote attackers to...
Google Chrome update: enhancing security with version 128.0.6613
In the ever-evolving landscape of cybersecurity, Google has rolled out significant updates for its Chrome Stable and Extended Stable channels, now featuring version 128.0.6613. This update is gradually...