Cobalt Strike Beacon Detected – 150[.]158[.]49[.]95:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
OSINT
[LYNX] – Ransomware Victim: Tricon Energy
Ransomware Group: LYNX VICTIM NAME: Tricon Energy NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[RHYSIDA] – Ransomware Victim: Easterseals
Ransomware Group: RHYSIDA VICTIM NAME: Easterseals NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[RANSOMHUB] – Ransomware Victim: elnamagnetics[.]com
Ransomware Group: RANSOMHUB VICTIM NAME: elnamagneticscom NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
Ransomware Gangs Use LockBit’s Fame to Intimidate Victims in Latest Attacks
Threat actors have been observed abusing Amazon S3 (Simple Storage Service) Transfer Acceleration feature as part of ransomware attacks designed...
Think You’re Secure? 49% of Enterprises Underestimate SaaS Risks
It may come as a surprise to learn that 34% of security practitioners are in the dark about how many...
Researchers Reveal ‘Deceptive Delight’ Method to Jailbreak AI Models
Cybersecurity researchers have shed light on a new adversarial technique that could be used to jailbreak large language models (LLMs)...
CVE Alert: CVE-2024-48706
Vulnerability Summary: CVE-2024-48706 Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the title parameter with action=add or action=editform within...
CVE Alert: CVE-2024-48707
Vulnerability Summary: CVE-2024-48707 Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit...
CVE Alert: CVE-2024-48570
Vulnerability Summary: CVE-2024-48570 Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports...
CVE Alert: CVE-2024-48708
Vulnerability Summary: CVE-2024-48708 Collabtive 3.1 is vulnerable to Cross-Site Scripting (XSS) via the name parameter in (a) file tasklist.php under...
CVE Alert: CVE-2024-49208
Vulnerability Summary: CVE-2024-49208 Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supporting application...
CVE Alert: CVE-2024-49210
Vulnerability Summary: CVE-2024-49210 Reflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x before...
CVE Alert: CVE-2024-49209
Vulnerability Summary: CVE-2024-49209 Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting...
CVE Alert: CVE-2024-39753
Vulnerability Summary: CVE-2024-39753 An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute...
CVE Alert: CVE-2024-45335
Vulnerability Summary: CVE-2024-45335 Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to...
CVE Alert: CVE-2024-49211
Vulnerability Summary: CVE-2024-49211 Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before...
CVE Alert: CVE-2024-48903
Vulnerability Summary: CVE-2024-48903 An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker...
CVE Alert: CVE-2024-45334
Vulnerability Summary: CVE-2024-45334 Trend Micro Antivirus One versions 3.10.4 and below (Consumer) is vulnerable to an Arbitrary Configuration Update that...
CVE Alert: CVE-2024-41183
Vulnerability Summary: CVE-2024-41183 Trend Micro VPN, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite under specific conditions...
CVE Alert: CVE-2024-46903
Vulnerability Summary: CVE-2024-46903 A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker...
CVE Alert: CVE-2024-48904
Vulnerability Summary: CVE-2024-48904 An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary...
CVE Alert: CVE-2024-41717
Vulnerability Summary: CVE-2024-41717 Kieback & Peter's DDC4000 series is vulnerable to a path traversal vulnerability, which may allow an unauthenticated...
CVE Alert: CVE-2024-43812
Vulnerability Summary: CVE-2024-43812 Kieback & Peter's DDC4000 series has an insufficiently protected credentials vulnerability, which may allow an unauthenticated attacker...