Author: Cybernoz

BeyondTrust fixes critical vulnerability in remote access, support solutions (CVE-2024-12356)
18
Dec
2024

BeyondTrust fixes critical vulnerability in remote access, support solutions (CVE-2024-12356)

BeyondTrust has fixed an unauthenticated command injection vulnerability (CVE-2024-12356) in its Privileged Remote Access (PRA) and Remote Support (RS) products…

Romance Baiting
18
Dec
2024

INTERPOL Pushes for “Romance Baiting” to Replace “Pig Butchering” in Scam Discourse

Dec 18, 2024Ravie LakshmananCyber Fraud / Social engineering INTERPOL is calling for a linguistic shift that aims to put to…

Top 10 cyber crime stories of 2024
18
Dec
2024

Top 10 cyber crime stories of 2024

The ransomware juggernaut rolled inexorably onwards in 2024, yet again, leaving more devastated victims in its wake. This year, the…

Detectify year in review 2024
18
Dec
2024

Detectify year in review 2024

In 2024, we shipped numerous features to help security teams manage their growing attack surface. Some examples are Domain Connectors…

Apache Tomcat RCE Vulnerability
18
Dec
2024

New Apache Tomcat Vulnerabilities Let Attackers Execute Remote Code

Two critical vulnerabilities have been discovered in Apache Tomcat, the popular open-source web server, and servlet container, potentially allowing attackers…

1-Click RCE Attack In Kerio Control UTM Allow Attackers Gain Firewall Root Access Remotely
18
Dec
2024

1-Click RCE Attack In Kerio Control UTM Allow Attackers Gain Firewall Root Access Remotely

GFI Software’s Kerio Control, a popular UTM solution, was found to be vulnerable to multiple HTTP Response Splitting vulnerabilities, which…

Appdome protects applications running on mobile-enabled platforms
18
Dec
2024

Appdome protects applications running on mobile-enabled platforms

Appdome announced that the Appdome Mobile Defense Platform now protects applications running on mobile-enabled platforms like Apple macOS, Apple visionOS,…

Top 10 Kubernetes and storage stories of 2024
18
Dec
2024

Top 10 Kubernetes and storage stories of 2024

“Not everyone runs Kubernetes in production, but everyone has a Kubernetes proof-of-concept project” – that’s the kind of thing you…

The Mask APT is back after 10 years of silence
18
Dec
2024

The Mask APT is back after 10 years of silence

The Mask APT is back after 10 years of silence Pierluigi Paganini December 18, 2024 Kaspersky researchers linked a new…

Sentinel agrentless Integration
18
Dec
2024

Microsoft Sentinel Launched Agentless Integration for SAP Security

With critical SAP vulnerabilities being weaponized within 72 hours of a patch release, and unprotected SAP applications provisioned in cloud…

Spring Framework Path Traversal Vulnerability (CVE-2024-38819) PoC Exploit Released
18
Dec
2024

Spring Framework Path Traversal Vulnerability (CVE-2024-38819) PoC Exploit Released

A Proof of Concept (PoC) exploit for the critical path traversal vulnerability identified as CVE-2024-38819 in the Spring Framework has…

Stairwell Core boosts threat intelligence for security teams
18
Dec
2024

Stairwell Core boosts threat intelligence for security teams

Stairwell announces Stairwell Core, which enables organizations to privately collect, store, and continuously reassess executable files so they can confidently…