Cobalt Stike Beacon Detected – 81[.]19[.]141[.]37:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Month: August 2022
Cobalt Stike Beacon Detected – 42[.]192[.]50[.]49:7001
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 221[.]194[.]44[.]217:82
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 45[.]76[.]211[.]220:2083
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 118[.]195[.]247[.]62:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 170[.]187[.]156[.]223:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 106[.]55[.]245[.]228:9998
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 23[.]105[.]204[.]140:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 47[.]108[.]180[.]121:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 101[.]43[.]225[.]48:8888
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Brute Ratel C4 Detected – 35[.]74[.]220[.]117:80
The Information provided at the time of posting was detected as "Brute Ratel C4". Depending on when you are viewing...
Patch now! Cisco VPN routers are vulnerable to remote control
Cisco has released a security advisory about several vulnerabilities in the Cisco Small Business RV series routers, covering the RV160,...
VMware Workspace ONE Access, Identity Manager and vRealize Automation code execution | CVE-2022-31658
NAME VMware Workspace ONE Access, Identity Manager and vRealize Automation code execution Platforms Affected:VMware vRealize Automation 7.6 VMware Workspace ONE...
VMware Workspace ONE Access, Identity Manager and vRealize Automation security bypass | CVE-2022-31656
NAME VMware Workspace ONE Access, Identity Manager and vRealize Automation security bypass Platforms Affected:VMware vRealize Automation 7.6 VMware Workspace ONE...
VMware Workspace ONE Access, Identity Manager and vRealize Automation code execution | CVE-2022-31659
NAME VMware Workspace ONE Access, Identity Manager and vRealize Automation code execution Platforms Affected:VMware vRealize Automation 7.6 VMware Workspace ONE...
Phishy calls and emails play on energy cost increase fears
Gas and electricity price concerns are rife at the moment, with spiralling costs and bigger increases waiting down the line....
Daily Vulnerability Trends: Mon Aug 08 2022
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-31656VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication...
VMware Workspace ONE Access, Identity Manager and vRealize Automation security bypass | CVE-2022-31656
NAME VMware Workspace ONE Access, Identity Manager and vRealize Automation security bypass Platforms Affected:VMware vRealize Automation 7.6 VMware Workspace ONE...
VMware Workspace ONE Access, Identity Manager and vRealize Automation code execution | CVE-2022-31658
NAME VMware Workspace ONE Access, Identity Manager and vRealize Automation code execution Platforms Affected:VMware vRealize Automation 7.6 VMware Workspace ONE...
VMware Workspace ONE Access, Identity Manager and vRealize Automation code execution | CVE-2022-31659
NAME VMware Workspace ONE Access, Identity Manager and vRealize Automation code execution Platforms Affected:VMware vRealize Automation 7.6 VMware Workspace ONE...
Attackers abuse open redirects in Snapchat and Amex in phishing attacks
Threat actors abuse open redirects on Snapchat and American Express to launch phishing attacks against Microsoft 365 users. Attackers abused...
Microsoft is blocking Tutanota email addresses from registering a MS Teams account
Microsoft is actively blocking Tutanota email addresses from registering a Microsoft Teams account. Tutanota is an end-to-end encrypted email app...
LockBit 3.0 Ransomware Victim: a2-pas[.]fr
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: vytelle[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
