The Iranian cybercriminals are deploying a new PowerShell-based stealer called PowerShortShell to steal Google and Instagram credentials from Farsi Speaking targeted audience worldwide. The info
Read more
GitLab servers are being exploited in DDoS attacks in excess of 1 Tbps
Threat actors are exploiting a security flaw in GitLab self-hosted servers to assemble botnets and launch gigantic distributed denial of service (DDoS) attacks, with some
Read more
CISA creates catalog of known exploited vulnerabilities, orders agencies to patch
The US Cybersecurity and Infrastructure Security Agency has established today a public catalog of vulnerabilities known to be exploited in the wild and has issued
Read more
Hackers Are Exploiting a Flaw in Popular Billing Software to Deploy Ransomware
In various versions of the popular BQE Software BillQuick billing solution, the security analysts of Huntress Labs have warned of a critical SQL injection bug.
Read moreRansomware gangs are abusing a zero-day in EntroLink VPN appliances
Multiple ransomware gangs have weaponized and are abusing a zero-day in EntroLink VPN appliances after an exploit was released on an underground cybercrime forum at
Read more
Hackers use SQL injection bug in BillQuick billing app to deploy ransomware
At least one hacking group is exploiting a security flaw in a popular billing software suite to gain initial access, take over servers, and then
Read moreZerodium seeking zero-days in ExpressVPN, NordVPN, and Surfshark VPN apps
Exploit broker Zerodium announced its intention today to buy zero-day vulnerabilities in the Windows clients of three major VPN providers—ExpressVPN, NordVPN, and Surfshark. Founded in
Read more
BatchQL – GraphQL Security Auditing Script With A Focus On Performing Batch GraphQL Queries And Mutations
BatchQL is a GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations. This script is not complex, and we welcome
Read moreDDoS botnets, cryptominers target Azure systems after OMIGOD exploit goes public
Threat actors are attacking Azure Linux-based servers using a recently disclosed security flaw named OMIGOD in order to hijack vulnerable systems into DDoS or crypto-mining
Read moreDDoS botnets, cryptominers target Azure systems after OMIGOD exploit goes public
Threat actors are attacking Azure Linux-based servers using a recently disclosed security flaw named OMIGOD in order to hijack vulnerable systems into DDoS or crypto-mining
Read more
Ghostscript zero-day allows full server compromises
Proof-of-concept exploit code was published online over the weekend for an unpatched Ghostscript vulnerability that puts all servers that rely on the component at risk
Read moreADS goes here!
If you don't see it, then please turn OFFAD blocker for this website.
Our ads are not aggressive and help us
pay for the server and coffee.
THANK YOU for your support!