Hackers Leveraging CHM Files To Attack Users With Password-Protected Zip Files
Hackers abuse CHM files because they can embed malicious scripts or code within them. Windows systems often trust and execute these files without many security…
Category: CyberSecurityNews
Researchers Released PoC For Windows Bluetooth Service RCE Vulnerability
Microsoft addressed a Remote code execution vulnerability on their Bluetooth service on March 2023 Patch Tuesday. This vulnerability could allow an unauthorized threat actor to…
P2Pinfect Redis Server with New Ransomware Payload
Cybersecurity researchers have identified a new ransomware payload associated with the P2Pinfect malware, primarily targeting Redis servers. This sophisticated malware, previously known for its peer-to-peer…
HC3 Unveils Qilin Ransomware Attacking Global Healthcare Organizations
The Health Sector Cybersecurity Coordination Center (HC3) has issued a critical alert regarding a new ransomware strain, Qilin, which is targeting healthcare organizations worldwide. This…
P2Pinfect Malware Deploy Ransomware Windows Via SSH
Cybersecurity researchers have discovered a significant evolution in the previously dormant P2Pinfect malware strain. The updated version can now deploy ransomware and a cryptominer, posing…
VMware ESXi Flaw Allows Attackers to Bypass Authentication
VMware has disclosed three critical vulnerabilities in its ESXi hypervisor that allow attackers to bypass authentication mechanisms. These vulnerabilities, identified as CVE-2024-37085, CVE-2024-37086, and CVE-2024-37087,…
Neiman Marcus Hacked: 64,000 customers Data Exposed
A Luxury retailer, Neiman Marcus, has disclosed a data breach affecting approximately 64,000 customers. The incident, which came to light after an investigation, exposed sensitive…
New MOVEit Auth Bypass Vulnerability Under Attack Now, Patch Immediately
Progress Software’s popular MOVEit Transfer and MOVEit Cloud-managed, file transfer solutions, have been found to contain a critical authentication bypass vulnerability (CVE-2024-5806). The vulnerability, which…
ANY.RUN Cyber Attack: Employee Email Address Hacked
A leading cybersecurity company has become the latest victim of a sophisticated phishing attack. The incident, which began in late May and culminated in a…
Hackers Use Windows XSS Flaw To Execute Arbitrary Command
The shift in attack vectors includes JavaScript, MSI files, LNK objects, and ISOs, as Microsoft has disabled Office macros in documents downloaded from the Internet.…
New Zip Slip vulnerability Let Attackers Execute Arbitrary Code
A Zip Slip vulnerability was discovered in Artifactory, the leading software repository manager, allowing attackers to execute arbitrary code through path traversal attacks. JFrog’s Artifactory…
WikiLeaks Founder Released After 5 Years
London, June 25, 2024—In a dramatic and unexpected turn of events, WikiLeaks founder Julian Assange has been released from prison after reaching a deal with…