North Korean state hackers start targeting the IT supply chain
North Korean-sponsored Lazarus hacking group has switched focus on new targets and was observed by Kaspersky security researchers expanding its supply…
Massive campaign uses YouTube to push password-stealing malware
Widespread malware campaigns are creating YouTube videos to distribute password-stealing trojans to unsuspecting viewers. [...]
Political-themed actor using old MS Office flaw to drop multiple RATs
A novel threat actor with unclear motives has been discovered running a crimeware campaign which delivers multiple Windows and Android RATs (remote…
Microsoft asks admins to patch PowerShell to fix WDAC bypass
Microsoft has asked system administrators to patch PowerShell 7 against two vulnerabilities allowing attackers to bypass Windows Defender Application Control (WDAC)…
Alchemy CMS 6.0.0 Arbitrary File Upload
Authored by Abdulrahman Alchemy CMS versions 2.x through 6.0.0 suffers from an arbitrary file upload vulnerability. Change Mirror Download #…
How Coinbase Phishers Steal One-Time Passwords
A recent phishing campaign targeting Coinbase users shows thieves are getting cleverer about phishing one-time passwords (OTPs) needed to complete…
Moodle Authenticated Spelling Binary Remote Code Execution
Authored by Brandon Perry | Site metasploit.com Moodle allows an authenticated user to define spellcheck settings via the web interface.…
NSA explains how to avoid dangers of Wildcard TLS Certificates and ALPACA attacks
The NSA issued a technical advisory to warn organizations against the use of wildcard TLS certificates and the […] The…
Cypress Solutions CTM-200/CTM-ONE Hard-Coded Credentials Remote Root
Authored by LiquidWorm | Site zeroscience.mk Cypress Solutions CTM-200/CTM-ONE suffers from a hard-coded credential remote root vulnerability via telnet and…
Cypress Solutions CTM-200 2.7.1 Root Remote OS Command Injection
Authored by LiquidWorm | Site zeroscience.mk Cypress Solutions CTM-200 wireless gateway version 2.7.1 suffers from an authenticated semi-blind OS command…