Cybercriminals Exploit Microsoft Word Vulnerabilities to Deploy LokiBot Malware

17/07/2023 0 Comments 0 tags

Microsoft Word documents exploiting known remote code execution flaws are being used as phishing lures to drop malware called LokiBot on compromised systems. “LokiBot, also known as Loki PWS, has been a

Malicious USB Drives Targetinging Global Targets with SOGU and SNOWYDRIVE Malware

17/07/2023 0 Comments 0 tags

Cyber attacks using infected USB infection drives as an initial access vector have witnessed a three-fold increase in the first half of 2023,  That’s according to new findings from Mandiant,

These 6 Questions Will Help You Choose the Best Attack Surface Management Platform

17/07/2023 0 Comments 0 tags

The hype around different security categories can make it difficult to discern features and capabilities from bias when researching new platforms. You want to advance your security measures, but what

Hackers Exploit WebAPK to Deceive Android Users into Installing Malicious Apps

17/07/2023 0 Comments 0 tags

Threat actors are taking advantage of Android’s WebAPK technology to trick unsuspecting users into installing malicious web apps on Android phones that are designed to capture sensitive personal information. “The attack began

Zimbra Warns of Critical Zero-Day Flaw in Email Software Amid Active Exploitation

16/07/2023 0 Comments 0 tags

Zimbra has warned of a critical zero-day security flaw in its email software that has come under active exploitation in the wild. “A security vulnerability in Zimbra Collaboration Suite Version

New SOHO Router Botnet AVrecon Spreads to 70,000 Devices Across 20 Countries

16/07/2023 0 Comments 0 tags

A new malware strain has been found covertly targeting small office/home office (SOHO) routers for more than two years, infiltrating over 70,000 devices and creating a botnet with 40,000 nodes

TeamTNT’s Cloud Credential Stealing Campaign Now Targets Azure and Google Cloud

16/07/2023 0 Comments 0 tags

A malicious actor has been linked to a cloud credential stealing campaign in June 2023 that’s focused on Azure and Google Cloud Platform (GCP) services, marking the adversary’s expansion in

AIOS WordPress Plugin Faces Backlash for Storing User Passwords in Plaintext

16/07/2023 0 Comments 0 tags

All-In-One Security (AIOS), a WordPress plugin installed on over one million sites, has issued a security update after a bug introduced in version 5.1.9 of the software caused users’ passwords

Defend Against Insider Threats: Join this Webinar on SaaS Security Posture Management

16/07/2023 0 Comments 0 tags

As security practices continue to evolve, one primary concern persists in the minds of security professionals—the risk of employees unintentionally or deliberately exposing vital information. Insider threats, whether originating from

Critical Security Flaws Uncovered in Honeywell Experion DCS and QuickBlox Services

16/07/2023 0 Comments 0 tags

Multiple security vulnerabilities have been discovered in various services, including Honeywell Experion distributed control system (DCS) and QuickBlox, that, if successfully exploited, could result in severe compromise of affected systems.