CISA: CISA and FBI Warn of Malicious Cyber Actors Using Buffer Overflow Vulnerabilities to Compromise Software
CISA and FBI Warn of Malicious Cyber Actors Using Buffer Overflow Vulnerabilities to Compromise Software CISA and the Federal Bureau...
CISA: CISA Releases Four Industrial Control Systems Advisories
CISA Releases Four Industrial Control Systems Advisories CISA released four Industrial Control Systems (ICS) advisories on January 14, 2025. These...
CVE Alert: CVE-2025-0905
Vulnerability Summary: CVE-2025-0905 PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose...
CVE Alert: CVE-2025-0903
Vulnerability Summary: CVE-2025-0903 PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers...
CVE Alert: CVE-2025-0904
Vulnerability Summary: CVE-2025-0904 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose...
CVE Alert: CVE-2025-0901
Vulnerability Summary: CVE-2025-0901 PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute...
CVE Alert: CVE-2025-0902
Vulnerability Summary: CVE-2025-0902 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose...
CVE Alert: CVE-2024-21966
Vulnerability Summary: CVE-2024-21966 A DLL hijacking vulnerability in the AMD Ryzen™ Master Utility could allow an attacker to achieve privilege...
CVE Alert: CVE-2024-12833
Vulnerability Summary: CVE-2024-12833 Paessler PRTG Network Monitor SNMP Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass...
CVE Alert: CVE-2025-0911
Vulnerability Summary: CVE-2025-0911 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose...
CVE Alert: CVE-2025-1044
Vulnerability Summary: CVE-2025-1044 Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected...
CVE Alert: CVE-2025-0899
Vulnerability Summary: CVE-2025-0899 PDF-XChange Editor AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code...
[FOG] – Ransomware Victim: Hess (hess-gmbh[.]de)
Ransomware Group: FOG VICTIM NAME: Hess (hess-gmbhde) NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[AKIRA] – Ransomware Victim: Vicky Foods
Ransomware Group: AKIRA VICTIM NAME: Vicky Foods NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
Cobalt Strike Beacon Detected – 47[.]83[.]218[.]121:81
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 1[.]94[.]140[.]47:1234
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 115[.]120[.]210[.]236:7777
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 110[.]41[.]165[.]237:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 110[.]42[.]48[.]177:88
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
[RANSOMHUB] – Ransomware Victim: slchc[.]edu
Ransomware Group: RANSOMHUB VICTIM NAME: slchcedu NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[QILIN] – Ransomware Victim: TJKM
Ransomware Group: QILIN VICTIM NAME: TJKM NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[QILIN] – Ransomware Victim: Erie Management Group, LLC
Ransomware Group: QILIN VICTIM NAME: Erie Management Group, LLC NOTE: No files or stolen information are by RedPacket Security. Any...
[RANSOMHUB] – Ransomware Victim: weathersa[.]co[.]za
Ransomware Group: RANSOMHUB VICTIM NAME: weathersacoza NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
CVE Alert: CVE-2025-0910
Vulnerability Summary: CVE-2025-0910 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...
