Cisco Fixes Critical Privilege Escalation Flaw in Meeting Management (CVSS 9.9)

23/01/2025 0 Comments 0 tags

Cisco has released software updates to address a critical security flaw impacting Meeting Management that could permit a remote, authenticated attacker to gain administrator privileges on susceptible instances. The vulnerability,

TRIPLESTRENGTH Hits Cloud for Cryptojacking, On-Premises Systems for Ransomware

23/01/2025 0 Comments 0 tags

Google on Wednesday shed light on a financially motivated threat actor named TRIPLESTRENGTH for its opportunistic targeting of cloud environments for cryptojacking and on-premise ransomware attacks. “This actor engaged in

Trump Terminates DHS Advisory Committee Memberships, Disrupting Cybersecurity Review

22/01/2025 0 Comments 0 tags

The new Trump administration has terminated all memberships of advisory committees that report to the Department of Homeland Security (DHS).  “In alignment with the Department of Homeland Security’s (DHS) commitment

Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet

22/01/2025 0 Comments 0 tags

Threat actors are exploiting an unspecified zero-day vulnerability in Cambium Networks cnPilot routers to deploy a variant of the AISURU botnet called AIRASHI to carry out distributed denial-of-service (DDoS) attacks.

President Trump Pardons Silk Road Creator Ross Ulbricht After 11 Years in Prison

22/01/2025 0 Comments 0 tags

U.S. President Donald Trump on Tuesday granted a “full and unconditional pardon” to Ross Ulbricht, the creator of the infamous Silk Road drug marketplace, after spending 11 years behind bars.

Discover Hidden Browsing Threats: Free Risk Assessment for GenAI, Identity, Web, and SaaS Risks

22/01/2025 0 Comments 0 tags

As GenAI tools and SaaS platforms become a staple component in the employee toolkit, the risks associated with data exposure, identity vulnerabilities, and unmonitored browsing behavior have skyrocketed. Forward-thinking security

PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack

22/01/2025 0 Comments 0 tags

A previously undocumented China-aligned advanced persistent threat (APT) group named PlushDaemon has been linked to a supply chain attack targeting a South Korean virtual private network (VPN) provider in 2023,

Oracle Releases January 2025 Patch to Address 318 Flaws Across Major Products

22/01/2025 0 Comments 0 tags

Oracle is urging customers to apply its January 2025 Critical Patch Update (CPU) to address 318 new security vulnerabilities spanning its products and services. The most severe of the flaws

Mirai Botnet Launches Record 5.6 Tbps DDoS Attack with 13,000+ IoT Device

22/01/2025 0 Comments 0 tags

Web infrastructure and security company Cloudflare on Tuesday said it detected and blocked a 5.6 Terabit per second (Tbps) distributed denial-of-service (DDoS) attack, the largest ever attack to be reported

HackGATE: Setting New Standards for Visibility and Control in Penetration Testing Projects

21/01/2025 0 Comments 0 tags

Imagine receiving a penetration test report that leaves you with more questions than answers. Questions like, “Were all functionalities of the web app tested?” or ” Were there any security