Severity High Analysis Summary The Middle East and Africa (MEA) region is experiencing a significant surge in ransomware attacks, driven primarily by the ransomware-as-a-service (RaaS) model. […]

Severity Low Analysis Summary CVE-2024-0173 CVSS:3.8 Dell PowerEdge and Precision Rack could allow a local authenticated attacker to obtain sensitive information, caused by an improper parameter […]

Severity High Analysis Summary CVE-2024-26165 CVSS:8.8 Microsoft Visual Studio Code local allow a remote authenticated attacker to gain elevated privileges on the system. By sending a […]

Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]

Severity High Analysis Summary Shuckworm APT – aka Actinium, Armageddon, Primitive Bear, Gamaredon, and Trident Ursa – has been a Russia-backed advanced persistent threat (APT) since […]

Severity Medium Analysis Summary Agent Tesla is a very popular spyware Trojan built for the .NET framework. Since its initial appearance in 2014, this has been […]

Severity High Analysis Summary An advanced cyber campaign targeting at least 116 organizations in 45 countries has compromised 70, and it is believed to be the […]

Severity High Analysis Summary The state of Alabama has been targeted by a Russian-backed hacktivist named Anonymous Sudan, which resulted in a massive network disruption. Days […]

Severity Medium Analysis Summary CVE-2023-47699 CVSS:6.1 IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript […]

Severity High Analysis Summary A new data leakage exploit that targets present-day CPU architectures supporting speculative execution has been found by a team of researchers. It […]

Severity Medium Analysis Summary CVE-2024-26124 CVSS:5.4 Adobe Experience Manager is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote authenticated attacker could […]

Severity High Analysis Summary CVE-2024-21411 Microsoft Skype for Consumer could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to […]

Severity High Analysis Summary Cobalt Strike first appeared in 2012 in response to alleged flaws in the Metasploit Framework, an existing red team (penetration testing) tool. […]

Severity High Analysis Summary CVE-2024-20745 Adobe Premiere Pro is vulnerable to a heap-based buffer overflow. By persuading a victim to open a specially crafted document, a […]

Severity High Analysis Summary Lazarus APT is one of North Korea’s most sophisticated threat actors, operating since at least 2009. Initially, they concentrated on South Korea. […]

Severity High Analysis Summary CVE-2024-22259 VMware Tanzu Spring Framework could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in UriComponentsBuilder. […]

Severity High Analysis Summary The notorious Russia-attributed threat group called APT28 has been behind several ongoing phishing campaigns that are using lure documents that masquerade as […]

Severity High Analysis Summary Kimsuky is a North Korean advanced persistent threat (APT) group, also known as “Black Banshee”. The group has been active since at […]

Severity High Analysis Summary The discovery of the “gitgub” campaign reveals a concerning trend in cybercriminal tactics, as cybersecurity researchers unearthed multiple GitHub repositories offering cracked […]

Severity High Analysis Summary A threat actor leaked the data of over 70 million people on a dark web forum and claimed that it was stolen […]

Severity High Analysis Summary The STOP/DJVU ransomware initially made headlines in 2018 and has since been attacking individuals all around the world. It’s widespread on torrent […]

Severity Medium Analysis Summary CVE-2024-28752 CVSS:6.5 Apache CXF is vulnerable to server-side request forgery, caused by a flaw when using the Aegis DataBinding. By using a […]

Severity High Analysis Summary CVE-2024-28045 CVSS:4.6 Delta Electronics DIAEnergie is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote authenticated attacker could […]

Severity Medium Analysis Summary Snake is a modular .NET keylogger that was first spotted in late November 2020. Snake malware’s main feature is keylogging, but it […]