North Korean Group Collaborates with Play Ransomware in Significant Cyber Attack
Threat actors in North Korea have been implicated in a recent incident that deployed a known ransomware family called Play,...
Malvertising Campaign Hijacks Facebook Accounts to Spread SYS01stealer Malware
Cybersecurity researchers have uncovered an ongoing malvertising campaign that abuses Meta's advertising platform and hijacked Facebook accounts to distribute information...
[FOG] – Ransomware Victim: SmartSource (smartsource-inc[.]com)
Ransomware Group: FOG VICTIM NAME: SmartSource (smartsource-inccom) NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[HANDALA] – Ransomware Victim: IM Cannabis
Ransomware Group: HANDALA VICTIM NAME: IM Cannabis NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
CVE Alert: CVE-2024-50423
Vulnerability Summary: CVE-2024-50423 Missing Authorization vulnerability in Templately allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templately: from...
CVE Alert: CVE-2024-50422
Vulnerability Summary: CVE-2024-50422 Missing Authorization vulnerability in Cloudways Breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze:...
CVE Alert: CVE-2024-7992
Vulnerability Summary: CVE-2024-7992 A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a...
CVE Alert: CVE-2024-8588
Vulnerability Summary: CVE-2024-8588 A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read...
CVE Alert: CVE-2024-50421
Vulnerability Summary: CVE-2024-50421 Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips allows Exploiting Incorrectly Configured Access...
CVE Alert: CVE-2024-50454
Vulnerability Summary: CVE-2024-50454 Missing Authorization vulnerability in The SEO Guys at SEOPress SEOPress allows Exploiting Incorrectly Configured Access Control Security...
CVE Alert: CVE-2024-8592
Vulnerability Summary: CVE-2024-8592 A maliciously crafted CATPART file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Memory Corruption...
CVE Alert: CVE-2024-7991
Vulnerability Summary: CVE-2024-7991 A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force an...
CVE Alert: CVE-2024-50428
Vulnerability Summary: CVE-2024-50428 Missing Authorization vulnerability in Mondula GmbH Multi Step Form allows Exploiting Incorrectly Configured Access Control Security Levels.This...
CVE Alert: CVE-2024-8593
Vulnerability Summary: CVE-2024-8593 A maliciously crafted CATPART file when parsed in ASMKERN230A.dll through Autodesk AutoCAD can force a Out-of-Bounds Write...
Cobalt Strike Beacon Detected – 120[.]24[.]38[.]217:4433
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 35[.]233[.]91[.]245:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 80[.]64[.]30[.]50:4433
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 47[.]97[.]86[.]181:1234
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 119[.]45[.]119[.]79:9898
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 124[.]222[.]132[.]248:8001
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 45[.]14[.]226[.]64:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Researchers Uncover Python Package Targeting Crypto Wallets with Malicious Code
Cybersecurity researchers have discovered a new malicious Python package that masquerades as a cryptocurrency trading tool but harbors functionality designed...
Embarking on a Compliance Journey? Here’s How Intruder Can Help
Navigating the complexities of compliance frameworks like ISO 27001, SOC 2, or GDPR can be daunting. Luckily, Intruder simplifies the...
[RANSOMHUB] – Ransomware Victim: tlie[.]org
Ransomware Group: RANSOMHUB VICTIM NAME: tlieorg NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...