Qakbot Malware is Targeting the Users Via Malicious Email Campaign
Qakbot, also known as QBot or Pinkslipbot, is a banking trojan that has been active since 2007. It has been...
threatintel
40% of all Android Phones Affected by Qualcomm Snapdragon Vulnerability
Security scientists who believe that a weakness that can be used to insert malicious code mostly on mobile by using...
WordPress-Brute-Force – Super Fast Login WordPress Brute Force
WordPress Brute Force Super Fast Login .---. .----------- / __ / ------ / / ( )/ ----- ////// ' /...
CANalyse – A Vehicle Network Analysis And Attack Tool
CANalyse is a tool built to analyze the log files to find out unique datasets automatically and able to connect...
19 petabytes of data exposed across 29,000+ unprotected databases
CyberNews researchers found more than 29,000 unprotected databases worldwide that are still publicly accessible, leaving close to 19,000 terabytes of...
[Full-Disclosure] HideezKey 2 FAIL: How a good idea turns into a SPF (Security Product Failure)
HideezKey- This is a deep-dive into a nice concept for a security token & password manager that turned into a...
VMware addresses critical RCE in vRealize Business for Cloud
VMware has fixed a new critical RCE flaw in VMware vRealize Business for Cloud that was reported by sanctioned Russian...
Connecting the Bots – Hancitor fuels Cuba Ransomware Operations
The Cuba Ransomware gang has partnered with the crooks behind the Hancitor malware in attacks aimed at corporate networks. The Hancitor downloader...
Possible attacks on the TCP/IP protocol stack and countermeasures
Let’s look at what types of threats each layer of the TCP/IP protocol stack may be susceptible to. The task...
Windows Moriya rootkit used in highly targeted attacks
Experts spotted a new malware, dubbed Moriya rootkit, that targets Windows systems as part of cyberespionage campaign dubbed TunnelSnake. An...
Facebook bans Signal ads that reveal the depth of what it knows about you
Most of our readers are well aware of the fact that the big tech corporations, especially those that run social...
BazarBackdoor Campaigns in Attempts to Avoid Detection
In two recent projects, threat actors using BazarBackdoor used an unusual combination of lures, tactics, and networks to target corporate...
Twilio Impacted By The Recent Codecov Supply-Chain Attack
Cloud Communications Company ‘Twilio’ has posted a blog on Tuesday and unfolded that its small number of users' emails have...
More Than 200 Belgian Organizations Knocked Offline in a Massive DDoS Attack
Belgium's national public sector network Belnet suffered a massive DDoS (distributed denial of service) attack on Tuesday that paralyzed internet...
Positive Technologies reported on the impact of U.S. sanctions on its IPO plans
Positive Technologies head Yury Maksimov positively assessed the impact of sanctions against the company on its plans to go public....
Northeastern University Team Finds New Ways to Detect Bugs in its Research
A research team at Northeastern University finds vulnerabilities and code defects. It does it by detecting when a programmer uses...
Operation TunnelSnake
Windows rootkits, especially those operating in kernel space, are pieces of malware infamous for their near absolute power in the...
Judge-Jury-and-Executable – A File System Forensics Analysis Scanner And Threat Hunting Tool
Features:Scan a mounted filesystem for threats right away Or gather a system baseline before an incident, for extra threat hunting...
Priv2Admin – Exploitation Paths Allowing You To (Mis)Use The Windows Privileges To Elevate Your Rights Within The OS
The idea is to "translate" Windows OS privileges to a path leading to: administrator, integrity and/or confidentiality threat, availability threat,...
Chinese PLA Unit 61419 suspected to have purchased AVs for cyber-espionage
Chinese military unit PLA Unit 61419 is suspected to be involved in cyber-espionage campaigns against multiple antivirus companies. Researchers from...
A taste of the latest release of QakBot
A taste of the latest release of QakBot – one of the most popular and mediatic trojan bankers active since...
Cisco fixes critical flaws in SD-WAN vManage and HyperFlex HX software
Cisco fixed critical flaws in SD-WAN vManage and HyperFlex HX software that could allow creating admin accounts, and executing commands...
180+ OAuth 2.0 cloud malware apps detected
Proofpoint offices in Toronto, Canada. (Raysonho @ Open Grid Scheduler / Scalable Grid Engine, CC0, via Wikimedia Commons)Researchers issued a...
Unidentified Cyberattackers Has Put Alaska Court System Offline
A recent cyberattack has forced The Alaska Court System (ACS) to temporarily discontinue its online services to the public including...
