Hackers Abuse QEMU Hardware Emulator for C2 Communication
QEMU is an open-source platform that provides a secure and private virtualized space for trying out malicious codes, exploits, and attacks on their own environments. …
Author: Cybernoz
Pentera Cloud empowers security teams to reduce exposure to cloud-native attacks
Pentera launched Pentera Cloud as part of its automated security validation platform to complement its renowned Pentera Core and Surface products. Pentera Cloud is the…
Update your iPhones and iPads now: Apple patches security vulnerabilities in iOS and iPadOS
Apple has released a security update for iOS and iPadOS to patch two zero-day vulnerabilities which are reported to already have been exploited. Zero-day vulnerabilities…
Watch out, GhostSec and Stourmous groups jointly conducting ransomware attacks
Watch out, GhostSec and Stourmous groups jointly conducting ransomware attacks Pierluigi Paganini March 06, 2024 Researchers warn that the cybercrime groups GhostSec and Stormous have…
Hackers Exploiting iOS 0-day to Attack iPhones
Two new zero-day vulnerabilities have been discovered in iOS and iPadOS 17.4 versions that could allow threat actors to bypass memory protections and perform arbitrary…
OpenNMS XSS Flaw Let Attackers Inject JavaScript Payload
A critical vulnerability in OpenNMS, a widely used network monitoring solution, has been identified, allowing attackers to inject malicious JavaScript payloads through a Cross-Site Scripting…
Vulnerability Risk Management for External Assets
With each new cloud application or third-party SaaS account, the external attack surface of pretty much every organization keeps growing day after day, every day.…
A New Way To Manage Your Web Exposure: The Reflectiz Product Explained
An in-depth look into a proactive website security solution that continuously detects, prioritizes, and validates web threats, helping to mitigate security, privacy, and compliance risks.…
Hackers target Docker, Hadoop, Redis, Confluence with new Golang malware
Hackers are targeting misconfigured servers running Apache Hadoop YARN, Docker, Confluence, or Redis with new Golang-based malware that automates the discovery and compromise of the…
Cloudflare Unveils AI Model Firewall to Enhance Security
Cloudflare has announced the launch of a new firewall specifically designed to protect AI models. This pioneering initiative aims to address the growing concerns around…
American Express Credit Card Information Exposed
American Express has recently notified its customers of a data breach involving a third-party service provider, marking a security incident that has potentially compromised customer…
‘Spinning YARN’ Hits Docker, other Key Apps
Linux Users Beware: “Spinning YARN” Malware Campaign Targets Misconfigured Servers Running on Apache Hadoop YARN, Docker, Confluence and Redis. Cado Security Labs has discovered an…