CISA: CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...
OSINT
CISA: CISA Releases New Public Version of CDM Data Model Document
CISA Releases New Public Version of CDM Data Model Document Today, the Cybersecurity and Infrastructure Security Agency (CISA) released an...
CISA: Cisco Releases Security Updates for NX-OS Software
Cisco Releases Security Updates for NX-OS Software Cisco released security updates to address a vulnerability in Cisco NX-OS software. A...
Cobalt Strike Beacon Detected – 47[.]115[.]54[.]19:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 60[.]204[.]134[.]21:8012
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 81[.]70[.]49[.]19:8092
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 110[.]41[.]185[.]80:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 120[.]25[.]190[.]37:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 156[.]238[.]225[.]81:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 124[.]71[.]202[.]76:8011
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
[APT73] – Ransomware Victim: azpay[.]me
Ransomware Group: APT73 VICTIM NAME: azpayme NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[PLAY] – Ransomware Victim: Standard Calibrations
Ransomware Group: PLAY VICTIM NAME: Standard Calibrations NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[FUNKSEC] – Ransomware Victim: ctsjo[.]com
Ransomware Group: FUNKSEC VICTIM NAME: ctsjocom NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[PLAY] – Ransomware Victim: Max Trans
Ransomware Group: PLAY VICTIM NAME: Max Trans NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[PLAY] – Ransomware Victim: ITO EN
Ransomware Group: PLAY VICTIM NAME: ITO EN NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[NITROGEN] – Ransomware Victim: SRP Federal Credit Union
Ransomware Group: NITROGEN VICTIM NAME: SRP Federal Credit Union NOTE: No files or stolen information are by RedPacket Security. Any...
[PLAY] – Ransomware Victim: NatAlliance Securities
Ransomware Group: PLAY VICTIM NAME: NatAlliance Securities NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[BIANLIAN] – Ransomware Victim: Star Shuttle Inc[.]
Ransomware Group: BIANLIAN VICTIM NAME: Star Shuttle Inc NOTE: No files or stolen information are by RedPacket Security. Any legal...
[RANSOMHUB] – Ransomware Victim: hanwhacimarron[.]com
Ransomware Group: RANSOMHUB VICTIM NAME: hanwhacimarroncom NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[SARCOMA] – Ransomware Victim: Anonymous Victim
Ransomware Group: SARCOMA VICTIM NAME: Anonymous Victim NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[FOG] – Ransomware Victim: Dorner (dorner-gmbh[.]de)
Ransomware Group: FOG VICTIM NAME: Dorner (dorner-gmbhde) NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
CVE Alert: CVE-2024-45717
Vulnerability Summary: CVE-2024-45717 The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section...
CVE Alert: CVE-2024-11398
Vulnerability Summary: CVE-2024-11398 Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in OTP reset functionality in...
CVE Alert: CVE-2023-6978
Vulnerability Summary: CVE-2023-6978 The WP Job Manager – Company Profiles plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via...
