1-Click RCE Attack In Kerio Control UTM Allow Attackers Gain Firewall Root Access Remotely
GFI Software’s Kerio Control, a popular UTM solution, was found to be vulnerable to multiple HTTP Response Splitting vulnerabilities, which...
Read more →Author: Cybernoz
Appdome protects applications running on mobile-enabled platforms
Appdome announced that the Appdome Mobile Defense Platform now protects applications running on mobile-enabled platforms like Apple macOS, Apple visionOS,...
Read more →
Top 10 Kubernetes and storage stories of 2024
“Not everyone runs Kubernetes in production, but everyone has a Kubernetes proof-of-concept project” – that’s the kind of thing you...
Read more →
The Mask APT is back after 10 years of silence
The Mask APT is back after 10 years of silence Pierluigi Paganini December 18, 2024 Kaspersky researchers linked a new...
Read more →
Microsoft Sentinel Launched Agentless Integration for SAP Security
With critical SAP vulnerabilities being weaponized within 72 hours of a patch release, and unprotected SAP applications provisioned in cloud...
Read more →
Spring Framework Path Traversal Vulnerability (CVE-2024-38819) PoC Exploit Released
A Proof of Concept (PoC) exploit for the critical path traversal vulnerability identified as CVE-2024-38819 in the Spring Framework has...
Read more →
Stairwell Core boosts threat intelligence for security teams
Stairwell announces Stairwell Core, which enables organizations to privately collect, store, and continuously reassess executable files so they can confidently...
Read more →
Beware Of Malicious SharePoint Notifications Delivering Xloader Malware
A sophisticated phishing campaign exploiting fake Microsoft SharePoint notifications to distribute the Xloader malware. This malicious operation, recently intercepted by...
Read more →
Multiple SHARP Routers Vulnerabilities Let Attackers Execute Arbitrary Code
Multiple vulnerabilities have been identified in SHARP routers, potentially allowing attackers to execute arbitrary code with root privileges or compromise...
Read more →
GitGuardian launches multi-vault integration to combat secrets sprawl
GitGuardian unveiled a comprehensive Non-Human Identity (NHI) security strategy with integrations across major secrets management platforms, addressing the growing challenge...
Read more →
New Playbook Integrates Cybersecurity Into Federal Grants
The Cybersecurity and Infrastructure Security Agency (CISA) and the Office of the National Cyber Director (ONCD) have jointly published a...
Read more →
Hackers Exploit Google Calendar & Google Drawings in Phishing Campaigns
Google Calendar, with over 500 million active users worldwide and availability in 41 languages, has long been celebrated for its...
Read more →