Category: Securityaffairs

Earth Lusca expands its arsenal with SprySOCKS Linux malware
30
Mar
2024

Expert found a backdoor in XZ tools used many Linux distributions

Expert found a backdoor in XZ tools used many Linux distributions Pierluigi Paganini March 30, 2024 Red Hat warns of…

ZDI discloses four zero-day flaws in Microsoft Exchange
30
Mar
2024

German BSI warns of 17K unpatched Microsoft Exchange servers

German BSI warns of 17,000 unpatched Microsoft Exchange servers Pierluigi Paganini March 30, 2024 The German Federal Office for Information…

Zero-day in Cisco ASA and FTD is actively exploited in ransomware attacks
29
Mar
2024

Cisco warns of password-spraying attacks targeting Secure Firewall devices

Cisco warns of password-spraying attacks targeting Secure Firewall devices Pierluigi Paganini March 29, 2024 Cisco warns customers of password-spraying attacks…

US teen pleads guilty to his role in credential stuffing attack on betting site
29
Mar
2024

American fast-fashion firm Hot Topic hit by credential stuffing attacks

American fast-fashion firm Hot Topic hit by credential stuffing attacks Pierluigi Paganini March 29, 2024 Hot Topic suffered credential stuffing attacks that…

Zero-day in Cisco ASA and FTD is actively exploited in ransomware attacks
28
Mar
2024

Cisco addressed high-severity flaws in IOS and IOS XE software

Cisco addressed high-severity flaws in IOS and IOS XE software Pierluigi Paganini March 28, 2024 Cisco addressed multiple vulnerabilities in…

China dominates government exploitation of zero-day vulnerabilities in 2023
28
Mar
2024

China dominates government exploitation of zero-day vulnerabilities in 2023

Google: China dominates government exploitation of zero-day vulnerabilities in 2023 Pierluigi Paganini March 28, 2024 Google’s Threat Analysis Group (TAG)…

GOOGLE FIXED THE FOURTH CHROME ZERO-DAY OF 2023
28
Mar
2024

Google addressed 2 Chrome zero-days demonstrated at Pwn2Own 2024

Google addressed 2 Chrome zero-days demonstrated at Pwn2Own 2024 Pierluigi Paganini March 28, 2024 Google addressed two zero-day vulnerabilities in…

INC Ransom stole 3TB of data from National Health Service (NHS) of Scotland
28
Mar
2024

INC Ransom stole 3TB of data from National Health Service (NHS) of Scotland

INC Ransom stole 3TB of data from the National Health Service (NHS) of Scotland Pierluigi Paganini March 27, 2024 The…

US CISA added critical Apache RocketMQ flaw to its Known Exploited Vulnerabilities catalog
27
Mar
2024

CISA adds Microsoft SharePoint bug disclosed at Pwn2Own to its Known Exploited Vulnerabilities catalog

CISA adds Microsoft SharePoint bug disclosed at Pwn2Own to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 27, 2024 U.S….

City of Philadelphia suffers a data breach
27
Mar
2024

The DDR Advantage: Real-Time Data Defense

The DDR Advantage: Real-Time Data Defense Pierluigi Paganini March 27, 2024 This is the advantage of Data Detection and Response…

Chinese cyberspies obtained Microsoft signing key from Windows crash dump due to a mistake
27
Mar
2024

Finnish police linked APT31 to the 2021 parliament attack

Finnish police linked APT31 to the 2021 parliament attack Pierluigi Paganini March 27, 2024 The Finnish Police attributed the attack…

TheMoon bot infected 40,000 devices in January and February
27
Mar
2024

TheMoon bot infected 40,000 devices in January and February

TheMoon bot infected 40,000 devices in January and February Pierluigi Paganini March 26, 2024 A new variant of TheMoon malware…