Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 650ac8296c53afd1f6adec4c34871c02SHA1: 29d81be34df4ecd0cee036d6d71bc1144c477bd5ANALYSIS DATE: 2023-04-17T17:42:34ZTTPS: T1005, T1081, T1082, T1112, T1060, T1107, T1490...
A rising trend has been identified among cybercriminals; they are using Action1 remote access software for reconnaissance activity and to...
Cloud Security Posture Management (CSPM) and SaaS Security Posture Management (SSPM) are frequently confused. The similarity of the acronyms notwithstanding,...
A new strain of malware developed by threat actors likely affiliated with the FIN7 cybercrime group has been put to...
The Deep, Dark Web – The Underground – is a haven for cybercriminals, teeming with tools and resources to launch...
Threat actors associated with the Vice Society ransomware gang have been observed using a bespoke PowerShell-based tool to fly under...
A Chinese nation-state group targeted an unnamed Taiwanese media organization to deliver an open source red teaming tool known as...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
NAME__________Fortinet FortiADC, Fortinet FortiDDoS, and Fortinet FortiDDoS-F command executionPlatforms Affected:Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Fortinet FortiADC, Fortinet FortiDDoS, and Fortinet FortiDDoS-F could...
NAME__________Arista EOS denial of servicePlatforms Affected:Arista EOS 4.24.11M Arista EOS 4.25.10M Arista EOS 4.26.9M Arista EOS 4.27.8.1M Arista EOS 4.28.5.1M...
NAME__________HPE OneView Global Dashboard (OVGD) information disclosurePlatforms Affected:HPE OneView Global Dashboard 2.71Risk Level:7.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________HPE OneView Global Dashboard (OVGD) could...
NAME__________HPE OneView Global Dashboard (OVGD) information disclosurePlatforms Affected:HPE OneView Global Dashboard 2.71Risk Level:7.8Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________HPE OneView Global Dashboard (OVGD) could...
NAME__________VMware Tanzu Spring Session information disclosurePlatforms Affected:VMware Tanzu Spring Session 3.0.0Risk Level:6.1Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________VMware Tanzu Spring Session could allow a...
NAME__________Auto Dealer Management System SQL injectionPlatforms Affected:Sourcecodester Auto Dealer Management System 1.0Risk Level:6.1Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Auto Dealer Management System is vulnerable...
NAME__________Trend Micro Security code executionPlatforms Affected:Trend Micro Security 2022/2023 17.7.1476 Trend Micro Security 2021 17.0.1412Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Trend Micro Security...
NAME__________Jubei JB Inquiry information disclosurePlatforms Affected:Jubei JB Inquiry 0.6.1 Jubei JB Inquiry 0.6.0 Jubei JB Inquiry 0.5.2 Jubei JB Inquiry...
NAME__________Auto Dealer Management System SQL injectionPlatforms Affected:Sourcecodester Auto Dealer Management System 1.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Auto Dealer Management System is vulnerable...
NAME__________FreeType tt_hvadvance_adjust function denial of servicePlatforms Affected:FreeType FreeType 2.12.1Risk Level:5.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________FreeType is vulnerable to a denial of service,...
NAME__________Microsoft Defender security bypassPlatforms Affected:Microsoft Malware Protection EngineRisk Level:6.2Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Microsoft Defender could allow a local attacker to bypass security...
NAME__________Matrix matrix-js-sdk information disclosurePlatforms Affected:Matrix matrix-js-sdk 24.0.0Risk Level:5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Matrix matrix-js-sdk could allow a remote authenticated attacker to obtain sensitive...
NAME__________LibreSSL security bypassPlatforms Affected:LibreSSL LibreSSL 3.4.1Risk Level:7.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________LibreSSL could allow a remote attacker to bypass security restrictions, caused by...
A novel credential-stealing malware called Zaraza bot is being offered for sale on Telegram while also using the popular messaging...
Image: Norebbo The LockBit ransomware gang has created encryptors targeting Macs for the first time, likely becoming the first major...
