CISA warns of recent successful cyberattacks against cloud service accounts
The US CISA revealed that several recent successful cyberattacks against various organizations’ cloud services. The Cybersecurity and Infrastructure Security Agency...
Month: January 2021
Attackers targeted Accellion FTA in New Zealand Central Bank attack
The root cause for the hack of the New Zealand Central Bank was the Accellion FTA (File Transfer Application) file...
Rogue Android RAT emerges from the darkweb
Experts discovered an Android Remote Access Trojan, dubbed Rogue, that can allow to take over infected devices and steal user...
CVE-2020-17503
Summary: The NDN-210 has a web administration panel which is made available over https. There is a command injection issue...
CVE-2021-1052
Summary: NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys)...
CVE-2021-21446
Summary: SAP NetWeaver AS ABAP, versions 740, 750, 751, 752, 753, 754, 755, allows an unauthenticated attacker to prevent legitimate...
CVE-2020-35701
Summary: An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in data_debug.php allows remote authenticated attackers...
CVE-2021-21466
Summary: SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200,...
Sunspot malware scoured servers for SolarWinds builds that it could weaponize
A malware program used in the SolarWinds supply-chain attack seeks out developers’ builds of the SolarWinds Orion IT management platform...
Microsoft issues 83 patches, one for actively exploited vulnerability
Every second Tuesday of the month it’s ‘Patch Tuesday’. On Patch Tuesday Microsoft habitually issues a lot of patches for...
The Russian expert explained why scammers distribute free SIM cards
SIM cards that are distributed on the street without signing a contract are most likely issued to someone else. Most...
DarkMarket Taken Down in an international Operation
DarkMarket, purportedly the world's biggest dark web marketplace, has been taken down by a Europol-coordinated international operation, as indicated by...
Threat Actor Targets New Zealand Reserve Bank to Acquire Sensitive Information
New Zealand’s Reserve Bank data systems were hacked by an anonymous hacker who potentially secured access to sensitive and personal...
Computing Giant Intel Launches New Processors with Ransomware Detection Features
One of the biggest computing giants of the world – Intel has utilized the power of technology and has launched...
Worst Plunge Since March Shakes Faith in Bitcoin
Bitcoin ride took another twist on Monday, as the worst two-day tumble in the digital currency since March stirred up...
Umbrella_android – Digital And Physical Security Advice App
Umbrella is an Android mobile app developed by Security First that provides human rights defenders with the information on what...
RadareEye – A Tool Made For Specially Scanning Nearby devices [BLE, Bluetooth And Wifi] And Execute Our Given Command On Our System When The Target Device Comes In-Between Range
A tool made for specially scanning nearby devices and execute our given command on our system when the target device...
Hack The Box Walkthrough guide to: Delivery
Disclaimer: I do NOT want you to read this if you have not even tried to attempt any of it...
Microsoft Patch Tuesday for January 2021 fixes 83 flaws, including an actively exploited issue
Microsoft Patch Tuesday security updates for January 2021 address 83 vulnerabilities, including a critical flaw actively exploited in the wild....
Data collection cheat sheet: how Parler, Twitter, Facebook, MeWe’s data policies compare
CyberNews researchers analyzed data from multiple social platforms like Parler, Twitter, Facebook, MeWe’s to compare data policies. Original Post at...
Sophisticated hacking campaign uses Windows and Android zero-days
Google Project Zero researchers uncovered a sophisticated hacking campaign that targeted Windows and Android users. The Google Project Zero team...
Police took down DarkMarket, the world’s largest darknet marketplace
The world’s largest black marketplace on the dark web, DarkMarket, has been taken offline by law enforcement in an international...
EMA: Some of Pfizer/BioNTech COVID-19 vaccine data was leaked online
The European Medicines Agency (EMA) revealed that some of the Pfizer/BioNTech COVID-19 vaccine data were stolen from its servers. In...
CVE-2021-0303
Summary: In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is a possible use after free due to a race condition. This could lead...
