Bughound – Static Code Analysis Tool Based On Elasticsearch
Bughound is an open-source static code analysis tool that analyzes your code and sends the results to Elasticsearch and Kibana...
US govt offers $10 million reward for info on nation-state cyber operations
The US government is offering a $10 million reward to everyone that provides information on operations conducted by nation-state actors....
Cisco fixes high-risk DoS flaw in ASA, FTD Software
Cisco addressed a high severity DoS vulnerability in the Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software. Cisco...
D-Link issues beta hotfix for multiple flaws in DIR-3040 routers
Network equipment vendor D-Link has released a firmware hotfix to fix multiple vulnerabilities in the DIR-3040 AC3000-based wireless internet router. Network equipment...
CVE-2020-13950
Summary: Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted...
CVE-2020-35452
Summary: Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest....
CVE-2021-26690
Summary: Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL...
CVE-2021-31618
Summary: Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured...
CVE-2021-35197
Summary: In MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots have certain unintended API access....
US offers huge reward in fight against state-sponsored cybercriminals
The US Department of State has announced that its Rewards for Justice (RFJ) program is now offering: …up to $10...
Does using a VPN slow down your Internet?
A Virtual Private Network (VPN) can stop others from snooping on or tampering with your Internet traffic. It does this...
What is scareware?
Scareware is a type of rogue program which has been around for many years, arguably dating back to 1990. It...
The eSIM technology stimulates the growth of the IoT market in Russia
The development of eSIM technology has become one of the drivers of the IoT market, both in Russia and around...
Kremlin Does Not Know Why All Websites Linked to Hacker Group REvil Are Down
Press secretary of the President of the Russian Federation Dmitry Peskov said that the Kremlin does not have information whether...
Fashion Retailer Guess Confirms Data Breach
Guess, the popular clothing and lifestyle brand is notifying the customers via letters of a data breach caused by a...
Palo Alto Networks’ Unit 42 Publishes Report on Mespinoza Group
Unit 42 of Palo Alto Networks has examined the Mespinoza gang's latest techniques and practices in identifying its 'cocky' message...
Threat Actors Use Marvel’s Black Widow Movie To Spread Malware
Marvel's Black Widow film has finally been released in theatres and online streaming platforms after being delayed for over a...
Kali-Whoami – A Privacy Tool Developed To Keep You Anonymous On Kali Linux At The Highest Level
The purpose of the Whoami tool makes you as anonymous as possible on Kali linux. It is an user friendly...
Exploit_Mitigations – Knowledge Base Of Exploit Mitigations Available Across Numerous Operating Systems, Architectures And Applications And Versions
The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes...
Microsoft alerts about a new Windows Print Spooler vulnerability
Microsoft published guidance to mitigate the impact of a new Windows Print Spooler vulnerability tracked as CVE-2021-34481 that was disclosed...
Google Chrome 91.0.4472.164 fixes a new zero-day exploited in the wild
Google Chrome 91.0.4472.164 addresses seven security vulnerabilities, including a high severity zero-day flaw exploited in the wild. Google has released...
New enhanced Joker Malware samples appear in the threat landscape
The Joker malware is back, experts spotted multiple malicious apps on the official Google Play store that were able to...
Israeli surveillance firm Candiru used Windows zero-days to deploy spyware
Experts said that Israeli surveillance firm Candiru, tracked as Sourgum, exploited zero-days to deliver a new Windows spyware. Microsoft and...
Exploit broker Zerodium is looking for VMware vCenter Server exploits
Zero-day exploit broker Zerodium is looking for 0day exploits for the VMware vCenter Server Zero-day exploit broker Zerodium announced it...
