Uncovering Attacker’s Infrastructre & Tactics Via Passive DNS
In the ever-evolving landscape of cybersecurity, understanding how attackers establish and maintain their attack infrastructure is crucial for building robust defenses. A recent study by…
Category: CyberSecurityNews
Let’s Encrypt to End Support for Online Certificate Status Protocol (OCSP)
Let’s Encrypt, a leading provider of free SSL/TLS certificates, has officially announced its timeline for discontinuing support for the Online Certificate Status Protocol (OCSP) in…
Romania’s Leading Energy Provider Electrica Group Hit by Ransomware Attack
Electrica Group, one of Romania’s most prominent energy service providers, has confirmed it is grappling with a ransomware attack. The cyber incident has prompted the…
New Raspberry Pi 500 All-in-One Compact Computer Launched
Just in time for the holiday season, Raspberry Pi has unveiled two highly anticipated products that are expected to be popular among both tech enthusiasts…
Hackers Attacking Global Sporting Championships Via Fake Domains
Cybercriminals leverage high-profile events, such as global sporting championships, by registering fake domains to launch phishing and scam attacks. Researchers uncover suspicious domain registration campaigns,…
OpenWrt Supply Chain Attack Via SHA-256 Collision & Command Injection
A critical vulnerability in OpenWrt’s firmware upgrade system has been recently unveieled by the security researcher RyotaK from Flatt Security Inc.. The exploit, which combines…
Mauri Ransomware Exploiting Apache ActiveMQ Vulnerability
The Apache ActiveMQ Vulnerability, identified as CVE-2023-46604, was exploited by Mauri Ransomware threat actors to install CoinMiners. Threat actors were detected continuously launching attacks on…
Cipla Allegedly Hacked, Akira Ransomware Claims 70GB Data Stolen
Cipla, the Indian pharmaceutical giant, has reportedly fallen victim to a cyberattack orchestrated by the Akira ransomware group. The hackers claim to have exfiltrated a…
Microsoft Challenged AI Hackers To Break LLM Email Service, Rewards Up To $10,000
Microsoft has launched an innovative cybersecurity challenge that puts artificial intelligence (AI) to the test. As Microsoft is inviting hackers and security researchers to attempt…
Synology Router Vulnerabilities Let Attackers Inject Arbitrary Web Script
Synology, a leading provider of network-attached storage and networking solutions, has recently patched multiple vulnerabilities in its Router Manager (SRM) software. These security flaws, classified…
Google’s New Open-Source Patch Validation Tools Vanir Unveiled
Google has officially launched Vanir, a groundbreaking open-source security patch validation tool designed to enhance the efficiency and accuracy of patch management. Announced during the…
Researcher Demonstrated On How Attacker Can Gain Full Admin Access With XSS
A cybersecurity researcher has unveiled an unexpected discovery that demonstrates how a simple Cross-Site Scripting (XSS) vulnerability can be leveraged to gain full administrative access…