Microsoft fixes seven zero-days, including two PuzzleMaker targets, Google fixes serious Android flaw
This patch Tuesday harvest was another big one. The Windows updates alone included seven zero-day vulnerability updates, two of them...
RockYou2021: The Largest Data Leak with 8.4 Billion Passwords
According to Cybernews, what appears to be the world's largest password collection, called RockYou 2021, has been leaked on a...
Uttarakhand, India Special Task Force Exposed a China Based Money Laundering Racket
The Police of Uttarakhand, India claimed that the web racket has duped naïve investors with at least 250cr Rs by...
Navistar International Corporation Hit by Cyberattack
Navistar International Corporation, a maker of United States trucks and military vehicles confirmed that it was hit by a cyberattack...
Major Security Flaw Patched by Hyperkitty
Hyperkitty, a Django-based application responsible for providing a web interface for the popular open-source mailing list and newsletter management service...
Is Apple’s Monopoly Making Its Security Vulnerable?
It's a well-known fact that Apple’s devices are undoubtedly way safer than any other company’s products, however, in recent research...
SharpWebServer – HTTP And WebDAV Server With Net-NTLM Hashes Capture Functionality
A Red Team oriented simple HTTP & WebDAV server written in C# with functionality to capture Net-NTLM hashes. To be...
Bbscope – Scope Gathering Tool For HackerOne, Bugcrowd, And Intigriti!
The ultimate scope gathering tool for HackerOne, Bugcrowd, and Intigriti by sw33tLie. Need to grep all the large scope domains...
CVE-2020-36008
Summary: OBottle 2.0 in \c\t.php contains an arbitrary file write vulnerability. Reference Links(if available): https://github.com/SomeBottle/OBottle/issues/7 CVSS Score (if available) v2:...
CVE-2021-30509
Summary: Out of bounds write in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a...
CVE-2020-36009
Summary: OBottle 2.0 in \c\g.php contains an arbitrary file download vulnerability. Reference Links(if available): https://github.com/SomeBottle/OBottle/issues/6 CVSS Score (if available) v2:...
CVE-2010-3843
Summary: The gtkui_conf_read function in src/interfaces/gtk/ec_gtk_conf.c in Ettercap 0.7.3, when the GTK interface is used, does not ensure that the...
CVE-2019-13538
Summary: 3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to display active...
TrickBot indictment reveals the scale and complexity of organized cybercrime
Back in 2016, we saw the emergence of a botnet mainstay called TrickBot. Initially observed by our Labs team spreading...
800 arrests after police dupe crime groups into using backdoored phones
An international operation that monitored an encrypted device company under control of the Federal Bureau of Investigation (FBI) and the...
This Malware that Uses Steam Profile Images to Hide Itself
In May 2021, a researcher tweeted about a new malware that hides itself inside Steam profile photos. Except for a...
The Russian expert assessed the demand of the State Department to stop cyberattacks on the United States
"Moscow should not react to such statements until the United States is ready to seriously discuss the rules of conduct...
India’s Finance Software Powerhouse NSE Blown By EpsilonRed Ransomware
Nucleus Software Exports, an Indian financial software company has witnessed a major ransomware attack. The company that facilitates Indian banks...
Private Details Compromised After Cyber Attack on NSW Health
The New South Wales Ministry of Health (NSW Health) has confirmed that it was impacted by a cyberattack involving the...
Identity Verification Platform Troolio Closes a $394 Million Deal
Id verification online platform Trulioo lands a $394 Million series D round of funding at a $1.75 Billion valuation after...
PuzzleMaker attacks with Chrome zero-day exploit chain
On April 14-15, 2021, Kaspersky technologies detected a wave of highly targeted attacks against multiple companies. Closer analysis revealed that...
ColdFire – Golang Malware Development Library
Golang malware development framework IntroductionColdFire provides various methods useful for malware development in Golang. Most functions are compatible with both...
Link – A Command And Control Framework Written In Rust
link is a command and control framework written in rust. Currently in beta. Introductionlink provides MacOS, Linux and Windows implants...
Spotify, PayPal, GitHub, and other major websites down due to Fastly CDN outage
A large number of popular websites including Reddit, Spotify, PayPal, GitHub, gov.uk, CNN, and the BBC are currently facing problems...
