Category Security

July 21, 2023THNMoreVulnerability / Botnet Several distributed denial of service (DDoS) botnets have been observed exploiting critical flaws in Zyxel devices that were revealed in April 2023 to remotely control vulnerable systems. Fortinet FortiGuard Labs researcher Cara Lin said, “Exploit…

July 21, 2023THNMoreVulnerability / Cyber ​​Threat The U.S. Cybersecurity and Infrastructure Security Agency (CISA) said on Thursday that a newly disclosed critical security flaw in Citrix NetScaler Application Delivery Controllers (ADCs) and gateway devices was exploited to drop webshells on…

July 20, 2023hacker news The reason Remote Desktop Protocol (RDP) seems to be around forever is because it has (at least compared to many technologies that have risen and fallen in just a few short years). An early version known…

July 20, 2023THNMoreCyber ​​Attack/Supply Chain An analysis of the indicators of compromise (IoCs) associated with the JumpCloud hack uncovered evidence of the involvement of North Korean state-backed groups in a format reminiscent of supply chain attacks targeting 3CX. The findings,…

July 20, 2023THNMoreVulnerability / Software Security Multiple security flaws have been revealed in Apache OpenMeetings, a web conferencing solution that could be exploited by malicious attackers to take control of administrator accounts and execute malicious code on vulnerable servers. may…

According to Bridewell, more than eight in 10 UK Critical National Infrastructure (CNI) companies (83%) believe new technologies designed to increase sustainability will be a key vector for cyberattacks. It is said that there is The security services company conducted…

July 20, 2023THNMoreHardware Security / System Administrator Two additional security flaws were revealed in the AMI MegaRAC Baseboard Management Controller (BMC) software that, if successfully exploited, could allow an attacker to remotely take over a vulnerable server and deploy malware.…

Microsoft has announced its intention to enhance cloud logging and improve security visibility for customers in response to the increasing frequency of nation-state cyber threats. write to blog post Announced on July 19, 2023, the tech giant will elevate the…

July 20, 2023THNMoreEndpoint Security/Data Safety Mallox ransomware activity increased 174% in 2023 compared to the previous year, according to new research from Palo Alto Networks Unit 42. “Mallox ransomware, like many other ransomware attackers, steals data before encrypting an organization’s…

A distributed denial of service (DDoS) botnet is being used to actively exploit critical vulnerabilities found in Zyxel firewall models. This flaw was identified by Fortinet security researchers as follows: CVE-2023-28771which explicitly affects the Linux platform. Exploitation of this vulnerability…