Critical Flaws in Ivanti Workspace Control Expose SQL Credentials
Discover the critical hardcoded key vulnerabilities in Ivanti Workspace Control that expose SQL credentials and the necessary security updates released by Ivanti.
Stay safe
Critical Google Bug Exposed User Phone Numbers: A Deep Dive
Discover how a recent Google bug allowed attackers to uncover user phone numbers, highlighting the importance of cybersecurity in protecting sensitive information.
Porn Website Owner Faces Life Sentence After Sex Trafficking Guilty Plea
Michael James Pratt, owner of GirlsDoPorn and GirlsDoToys, faces life in prison after pleading guilty to sex trafficking charges. Discover the shocking details of his criminal operation and its dev...
FIN6 Exploits AWS and LinkedIn with Fake Resumes to Deliver More_eggs Malware
TL;DR The cybercriminal group FIN6 is using fake resumes hosted on AWS and distributed via LinkedIn to spread More_eggs malware. This tactic involves building trust with recruiters before sending p...
FIN6 Hackers Exploit Job Seeker Personas to Backdoor Recruiters' Devices
Discover how the FIN6 hacking group is using sophisticated social engineering tactics to target recruiters by posing as job seekers. Learn about their methods and how to protect against such threats.
DanaBot Malware Operators Unveiled: A 2022 C2 Bug Leads to Law Enforcement Takedown
Discover how a critical vulnerability in DanaBot malware led to the exposure and dismantling of its operators in a significant law enforcement operation.
Critical Wazuh Vulnerability Exploited by Mirai Botnet Variants
TL;DR Cybercriminals are exploiting a critical Wazuh vulnerability to spread Mirai botnet variants. This marks the first active attack since the code execution bug was disclosed. Wazuh’s ser...
ConnectWise Enhances Security by Rotating Code Signing Certificates
TL;DR ConnectWise is rotating its code signing certificates for ScreenConnect, ConnectWise Automate, and ConnectWise RMM due to security concerns. This proactive measure aims to enhance the securit...
Google's Phone Number Vulnerability: Cloud Brute-Force Attack Exposed
Discover how a cloud brute-force attack exploited Google's authentication systems, exposing users' phone numbers and highlighting critical security flaws.
CISA Updates Known Exploited Vulnerabilities Catalog with Erlang SSH and Roundcube Flaws
TL;DR The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical security flaws affecting Erlang/Open Telecom Platform (OTP) SSH and Roundcube to its Known Exploited Vu...