OpenWrt Supply Chain Attack Via SHA-256 Collision & Command Injection
A critical vulnerability in OpenWrt’s firmware upgrade system has been recently unveieled by the security researcher RyotaK from Flatt Security Inc.. The exploit, which combines…
Category: CyberSecurityNews
Mauri Ransomware Exploiting Apache ActiveMQ Vulnerability
The Apache ActiveMQ Vulnerability, identified as CVE-2023-46604, was exploited by Mauri Ransomware threat actors to install CoinMiners. Threat actors were detected continuously launching attacks on…
Cipla Allegedly Hacked, Akira Ransomware Claims 70GB Data Stolen
Cipla, the Indian pharmaceutical giant, has reportedly fallen victim to a cyberattack orchestrated by the Akira ransomware group. The hackers claim to have exfiltrated a…
Microsoft Challenged AI Hackers To Break LLM Email Service, Rewards Up To $10,000
Microsoft has launched an innovative cybersecurity challenge that puts artificial intelligence (AI) to the test. As Microsoft is inviting hackers and security researchers to attempt…
Synology Router Vulnerabilities Let Attackers Inject Arbitrary Web Script
Synology, a leading provider of network-attached storage and networking solutions, has recently patched multiple vulnerabilities in its Router Manager (SRM) software. These security flaws, classified…
Google’s New Open-Source Patch Validation Tools Vanir Unveiled
Google has officially launched Vanir, a groundbreaking open-source security patch validation tool designed to enhance the efficiency and accuracy of patch management. Announced during the…
Researcher Demonstrated On How Attacker Can Gain Full Admin Access With XSS
A cybersecurity researcher has unveiled an unexpected discovery that demonstrates how a simple Cross-Site Scripting (XSS) vulnerability can be leveraged to gain full administrative access…
Qlik Sense Enterprise For Windows Vulnerability Let Attackers Execute Remote Code
A critical security vulnerability has been discovered in Qlik Sense Enterprise for Windows, potentially allowing attackers to execute remote code on affected systems. The issue,…
IBM QRadar SIEM Vulnerability Let Hackers Inject Malicious JavaScript In Web UI
A critical XSS vulnerability identified in IBM’s QRadar SIEM (Security Information and Event Management) platform, tracked as CVE-2024-47107, allows authenticated users execute malicious Javascript code…
Microsoft Releasing New Windows Recall Feature To Copilot+ PCs For Insiders
Microsoft has finally begun rolling out its highly anticipated Recall feature to Windows Insiders with Copilot+ PCs, marking a significant milestone in AI-powered productivity tools…
New Tool For Red Teamers To Execute System Command On Hosts Via Microsoft Teams
A groundbreaking tool has emerged in the realm of red teaming, offering a sophisticated method to execute system commands on compromised hosts through Microsoft Teams.…
Starbucks Third-party Ransomware Attack, Termite Group Claims Credit
A ransomware attack on supply chain technology provider Blue Yonder has caused significant disruptions for its clients, including Starbucks, BIC, and Morrisons. The newly emerged…