Author: Mash

Threat actors are compromising Windows IIS servers to add expired certificate notification pages that bait users into downloading a fake [...]

A new ongoing Zloader attack is using a new infection chain to disable Windows Defender to evade detection. The attackers [...]

Microsoft has recently disclosed MSHTML zero-day vulnerability that allows threat actors to create malicious documents, including Office and RTF docs, [...]

Internet Explorer MSHTML remote code execution vulnerability, tracked as CVE-2021-40444, was recently disclosed by Microsoft without many details since it [...]

Recently disclosed Atlassian Confluence remote code execution vulnerability is currently being actively exploited by hackers to install cryptominers. Atlassian Confluence [...]

Recently security researchers have discovered that is very easy to gain SYSTEM privileges using Razer mouse for example, since after [...]

ProxyShell is a collection of three security vulnerabilities discovered by Devcore security researcher Orange Tsai during Pwn2Own 2021 hacking contest. Microsoft [...]

According to Kaspersky researchers, a malicious version of the FMWhatsappWhatsApp mod has been distributing Triadatrojan payload that infects its victims [...]

A Mirai-based botnet is targeting hundreds of thousands of Realtek-based devices that are using SDK software. The malware campaign became [...]

Plugging a Razer device into the Windows 10 or Windows 11 makes the system download and install Razer Synapse software, [...]

Malware campaign that uses a clever captcha to download the Gozi (aka Ursnif) banking trojan has been discovered by the [...]

According to CISA, security flaws known as BaldAlloc are affecting BlackBerry's QNX Real Time Operating System (RTOS) that is used [...]

According to the Chinese decentralized finance (DeFi) platform Poly Network shared two hours ago, the hacker behind the recent Poly [...]

According to Microsoft's advisory, Windows Print Spooler zero-day allows local attackers to gain SYSTEM privileges on a computer. This zero-day [...]

A new NTLM attack called PetitPotam allows hackers to take over a domain controller, and thus an entire Windows domain. [...]

ReverseLabs researchers have disclosed their findings on two npm packages that steal passwords from the Google Chrome browser. The packages [...]

A 16-year-old security vulnerability found in an HP, Xerox, and Samsung printers driver allows attackers to gain admin rights on [...]

According to Human rights non-governmental organization Amnesty International and non-profit project Forbidden Stories report, the spyware made by Israeli surveillance [...]

Recently Microsft has revealed a vulnerability in SolarWinds Serv-U FTP servers allowing for the remote code execution, and tonight Microsoft [...]

SolarWinds has patched critical Serv-U remote code execution vulnerability that has been actively exploited by the single threat actor, targeting [...]

Threat actors are actively pushing Cobalt Strike payloads disguised as Kaseya VSA security updates to steal sensitive users' data, targeting [...]

KB5004945 emergency security update has been released by Microsoft to fix the recent PrintNightmare zero-day vulnerability, but the patch still [...]

Google has removed 9 popular Android apps that were confirmed to steal users' Facebook passwords. The removed apps are Processing [...]

REvil ransomware attack reportedly affects multiple managed service providers and their clients through a reported Kaseya supply-chain attack. Eight known [...]

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a notification regarding the critical PrintNightmare zero-day vulnerability and warned admins [...]

Microsoft has discovered firmware vulnerabilities in certain Netgear router models that could lead to network breaches. Those vulnerabilities impact DGN2200v1 [...]

Technical details and a proof-of-concept (PoC) exploit have been accidentally leaked for a currently unpatched vulnerability that affects Windows Print [...]

DoubleVPN is a Russian-based VPN service that double-encrypts data sent through their service. Threat actors often use the service in [...]