IT Information Security

Operation Talent: An international law enforcement operation seized Cracked, Nulled and other cybercrime websites

An international law enforcement operation targeted several major cybercrime websites, including Cracked, Nulled, Sellix, and StarkRDP.  An international law enforcement…

1 year ago

PHP package Voyager flaws expose to one-click RCE exploits

The open-source PHP package Voyager is affected by three vulnerabilities that could be exploited to achieve one-click remote code execution on affected…

1 year ago

Italy’s Data Protection Authority Garante requested information from Deepseek

Italy’s data privacy regulator Garante has requested information from Chinese AI company DeepSeek regarding its data practices. Italy’s Data Protection…

1 year ago

U.S. CISA adds Apple products’ flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple products' flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity…

1 year ago

Aquabot variant v3 targets Mitel SIP phones

A new variant of the Mirai-based botnet Aquabot targets vulnerable Mitel SIP phones to recruit them into a DDoS botnet.…

1 year ago

Critical remote code execution bug found in Cacti framework<gwmw style="display:none;"></gwmw>

A critical flaw in Cacti open-source network monitoring and fault management framework that could allow remote code execution. Cacti is an…

1 year ago

Attackers actively exploit a critical zero-day in Zyxel CPE Series devices<gwmw style="display: none; background-color: transparent;"></gwmw>

Experts warn that threat actors are actively exploiting critical zero-day vulnerability, tracked as CVE-2024-40891, in Zyxel CPE Series devices. GreyNoise…

1 year ago

Attackers exploit SimpleHelp RMM Software flaws for initial access

Threat actors exploit recently fixed SimpleHelp RMM software vulnerabilities to breach targeted networks, experts warn. Horizon3 researchers discovered three vulnerabilities,…

1 year ago

VMware fixed a flaw in Avi Load Balancer

VMware fixed a high-risk blind SQL injection vulnerability in Avi Load Balancer, allowing attackers to exploit databases via crafted queries.…

1 year ago

Ransomware attack on ENGlobal compromised personal information

ENGlobal reported to the SEC that personal information was compromised in a ransomware attack that took place in November 2024.…

1 year ago

This website uses cookies.