23 Vulnerabilities Fixed in Latest Release
Google has announced a comprehensive update to the Chrome and Extended Stable channels. The latest release, version 124.0.6367.60/.61 for Windows and Mac and version 124.0.6367.60…
Category: CyberSecurityNews
Cisco IMC Command Injection Vulnerability Under Active Attack
An attacker with read-only or higher privileges on a Cisco Integrated Management Controller (IMC) can exploit a command injection vulnerability (CVE-2024-20295) to gain full control…
New Redline Stealer Variant Leverages Lua Bytecode
Redline Stealer is a powerful information-stealing malware, and hackers often exploit this stealthy stealer to gain unauthorized access to a victim’s sensitive data. Threat actors…
Russia, Ukraine, and China at the Top
A new “Cybercrime Index” has been introduced, ranking countries based on the threat level posed by cybercriminals. The Index reveals that many countries, led by…
Kubernetes Clusters Under Attack: Critical OpenMetadata Flaws
Microsoft Security recently revealed a sophisticated cyber-attack campaign that targets Kubernetes clusters by exploiting newly discovered vulnerabilities in the OpenMetadata platform. The attackers have set…
Authorities Busted Cybercrime Platform That Steal Passwords
International law enforcement agencies have successfully dismantled a notorious cybercrime platform, LabHost, which facilitated criminals in conducting phishing attacks to steal sensitive information such as passwords, addresses,…
Poisoned Google Ads Targeting Infra Teams
Security researchers uncovered a sophisticated malvertising campaign targeting IT professionals, particularly those in security and network administration roles. The threat actor behind this attack has…
Cisco IOS SNMP Implementation Flaw Trigger Remote Attacks
In a recent security advisory, Cisco disclosed a significant vulnerability in the implementation of the Simple Network Management Protocol (SNMP) IPv4 access control list (ACL)…
Unfazed by Yet Another Critical Firewall Vulnerability (CVE-2024-3400)
In the wake of the recent disclosure of a critical vulnerability (CVE-2024-3400) affecting a leading firewall solution, Xiid Corporation reminds organizations that Xiid SealedTunnel customers…
How Secure Is Your Active Directory?
Microsoft’s Active Directory (AD) serves as the central nervous system for your organization’s network. It guards company resources by ensuring that only authorized users have…
New Vulnerability Exposes Cloud Credentials
Multiple Cloud Service providers like Google Cloud, AWS, and Azure have been discovered with a new vulnerability that has been termed “LeakyCLI.” As the name…
Hackers Attempted to Takeover of JavaScript Project
Attackers tried to take over the JavaScript project from OpenJS Foundation, which is home to JavaScript projects utilized by billions of websites globally. This is similar…