Cobalt Stike Beacon Detected – 121[.]37[.]101[.]254:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Month: August 2022
Cobalt Stike Beacon Detected – 46[.]183[.]217[.]197:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
HackerOne Bug Bounty Disclosure: stored-xss-on-tiktok-adsbysinayeganeh
Programme HackerOne TikTok TikTok Submitted by sinayeganeh sinayeganeh Report Stored XSS on TikTok Ads Full Report A considerable amount of...
CISA added SAP flaw to its Known Exploited Vulnerabilities Catalog
US CISA added a critical SAP flaw to its Known Exploited Vulnerabilities Catalog after its details were disclosed at the...
crAPI – Completely Ridiculous API
completely ridiculous API (crAPI) will help you to understand the ten most critical API security risks. crAPI is vulnerable by...
A flaw in Amazon Ring could expose user’s camera recordings
Amazon addressed a high-severity flaw in its Ring app for Android that could have exposed sensitive information and camera recordings....
Banorte – 2,107,000 breached accounts
In August 2022, millions of records from Mexican bank "Banorte" were publicly dumped on a popular hacking forum including 2.1M...
Cobalt Stike Beacon Detected – 42[.]192[.]45[.]12:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 81[.]71[.]83[.]195:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 44[.]206[.]117[.]100:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 120[.]77[.]46[.]100:8080
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]140[.]209[.]71:7443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 149[.]255[.]35[.]183:8080
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 54[.]95[.]30[.]6:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 89[.]185[.]85[.]162:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cisco fixes High-Severity bug in Secure Web Appliance
Cisco addressed a high-severity escalation of privilege vulnerability (CVE-2022-20871) in AsyncOS for Cisco Secure Web Appliance. Cisco Secure Web Appliance (formerly Secure Web Appliance (WSA)) offers protection from...
Bumblebee attacks, from initial access to the compromise of Active Directory Services
Threat actors are using the Bumblebee loader to compromise Active Directory services as part of post-exploitation activities. The Cybereason Global Security...
Vim code execution | CVE-2022-2845
NAME Vim code execution Platforms Affected:Vim Vim 9.0.0216Risk Level:7.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Vim could allow a remote attacker to...
Zoom Client for Meetings for macOS privilege escalation | CVE-2022-28757
NAME Zoom Client for Meetings for macOS privilege escalation Platforms Affected:Zoom Client for Meetings for macOS 5.7.3 Zoom Client for...
Weaveworks GitOps Tools Extension for VSCode code execution | CVE-2022-35975
NAME Weaveworks GitOps Tools Extension for VSCode code execution Platforms Affected:Weaveworks GitOps Tools Extension for VSCode 0.7.0 Weaveworks GitOps Tools...
TERUTEN WebCube code execution | CVE-2022-23764
NAME TERUTEN WebCube code execution Platforms Affected:TERUTEN WebCube 1.0.5.5Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION TERUTEN WebCube could allow a remote attacker to...
ipTIME NAS family cross-site request forgery | CVE-2022-23765
NAME ipTIME NAS family cross-site request forgery Platforms Affected:ipTIME NAS 1.4Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION ipTIME NAS family is vulnerable to...
Vim buffer overflow | CVE-2022-2849
NAME Vim buffer overflow Platforms Affected:Vim Vim 9.0.0218Risk Level:7.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Vim is vulnerable to a heap-based buffer...
Estonia blocked cyberattacks claimed by Pro-Russia Killnet group
Estonia announced to have blocked a wave of cyber attacks conducted by Russian hackers against local institutions. Undersecretary for Digital...
