Month: October 2023

Hackers exploit critical flaw in WordPress Royal Elementor plugin

October 17, 2023

A critical severity vulnerability impacting Royal Elementor Addons and Templates up to version 1.3.78 is reported to be actively exploited...

Cisco warns of new IOS XE zero-day actively exploited in attacks

October 17, 2023

Cisco warned admins today of a new maximum severity authentication bypass zero-day in its IOS XE software that lets unauthenticated...

Kansas courts IT systems offline after ‘security incident’

October 17, 2023

Information systems of state courts across Kansas are still offline after they've been disrupted in what the Kansas judicial branch...

Cisco IOS XE Escalation of Privilege Vulnerability

October 17, 2023

A vulnerability was identified in Cisco IOS XE. A remote attacker could exploit this vulnerability to trigger elevation of privilege on the targeted system. Note: CVE-2023-20198...

New RomCom Backdoor Targets Female Political Leaders

October 17, 2023

Japanese cybersecurity provider Trend Micro has uncovered a new malicious campaign targeting female political leaders and attendees of the Women...

Growing Concern Over Role of Hacktivism in Israel-Hamas Conflict

October 17, 2023

Hacktivists have claimed to hit Israeli websites through DDoS and defacement attacks following the outbreak of conflict between Israel and...

Signal Disputes Alleged Zero-Day Flaw

October 17, 2023

The encrypted messaging app Signal has refuted widespread claims of a zero-day software vulnerability. After an investigation, the company has...

Ransomware Targets Unpatched WS_FTP Servers

October 17, 2023

Unpatched WS_FTP servers exposed to the internet have become prime targets for ransomware attacks, with threat actors exploiting a critical...

Posh C2 Detected – 88[.]210[.]9[.]139:443

October 17, 2023

The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...

News

US-CERT Vulnerability Summary for the Week of October 9, 2023

October 16, 2023

High VulnerabilitiesPrimary Vendor -- ProductDescriptionPublishedCVSS ScoreSource & Patch Info3ds -- teamwork_cloud_no_magic_releaseA Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from...

fbd5312f3e5a2eeadc83a9c06c7281f0d808be87feee6fb3db54c51b2d3563e5

Gcp_Scanner – A Comprehensive Scanner For Google Cloud

October 16, 2023

This is a GCP resource scanner that can help determine what level of access certain credentials possess on GCP. The...

HackerOne Bug Bounty Disclosure: b-critical-curl-cve-vulnerability-code-changes-are-disclosed-on-the-internet-b-shelldoit

October 16, 2023

Company Name: b'curl' Company HackerOne URL: https://hackerone.com/curl Submitted By:b'shelldoit'Link to Submitters Profile:https://hackerone.com/b'shelldoit' Report Title:b' Curl CVE-2023-38545 vulnerability code changes are...

HackerOne Bug Bounty Disclosure: b-inviting-excessive-long-email-addresses-to-a-calendar-event-makes-the-server-unresponsive-b-shuvam

October 16, 2023

Company Name: b'Nextcloud' Company HackerOne URL: https://hackerone.com/nextcloud Submitted By:b'shuvam321'Link to Submitters Profile:https://hackerone.com/b'shuvam321' Report Title:b'Inviting excessive long email addresses to a...

Black Basta Ransomware Victim: DOMAIN-BACCARAT_2

October 16, 2023

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Black Basta Ransomware Victim: NCC_2

October 16, 2023

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...