Find Malware With ANY RUN Threat Intelligence YARA Search
YARA is a rule-based malware detection tool that utilizes regular expressions and textual/binary signatures to create descriptions (rules) for identifying malicious files. Within ANY.RUN TI,…
Category: CyberSecurityNews
Dependency Confusion Vulnerability Found in an Archived Apache Project
Researchers discovered a vulnerability in an archived Apache project, highlighting the risk of using outdated third-party dependencies, where attackers can exploit the way package managers…
Hackers Abuse Autodesk Drive For Hosting Weaponized PDF Files
Autodesk Drive is a data-sharing platform for organizations to share documents and files in the cloud. It also supports 2D and 3D data files, including…
Cactus Ransomware Exploiting Qlik Servers Vulnerability
The Cactus ransomware gang has been exploiting vulnerable Qlik sense servers ever since November 2023 using multiple vulnerabilities such as CVE-2023-41266 (Path Traversal), CVE-2023-41265 (HTTP…
Chrome Critical Flaw Let Attackers Execute Arbitary Code : Patch Now
Google announced the release of Chrome 124, which fixes four vulnerabilities, including a critical security issue that allows attackers to execute arbitrary code. Over the next…
Microsoft Releases Historical MS-DOS 4.0 Source Code
In a significant move for tech enthusiasts and historians alike, Microsoft has made the source code for MS-DOS 4.0 publicly available. This decision marks a…
MuddyWater Hackers Abusing RMM Tool to Deliver Malware
The Iranian state-sponsored threat actor MuddyWater has been observed exploiting a legitimate remote monitoring and management (RMM) tool, Atera Agent, to conduct a sophisticated malware…
Hackers Actively Exploiting WP Automatic Updates Plugin Flaw
Hackers often target WordPress plugins as they have security loopholes that they can exploit to hack into sites without permission. Once they have found them,…
PoC Exploit Released For Critical Flowmon Vulnerability
Progress addressed a critical vulnerability last week, which was associated with an unauthenticated Command injection on the Progress Flowmon product. This vulnerability was assigned CVE-2024-2189,…
Hackers Exploit Google Ads to Spread IP Scanner with Concealed Backdoor
Malicious actors are distributing a new backdoor, MadMxShell, through a Google Ads campaign that impersonates an IP scanner. This Windows backdoor leverages DNS MX queries…
Founders of Crypto Service Arrested for Money Laundering
Rodriguez and Hill, founders of the cryptocurrency mixing service Samourai, have been arrested for operating an unlicensed money-transmitting business and facilitating large-scale money laundering activities.…
PlugX USB worm Infected Over 2.5M Devices
A new menace has emerged, affecting millions of devices worldwide. The PlugX USB worm, a sophisticated malware, has been reported to have infected over 2.5…