CYBER ATTACK

Over 200 websites were taken over by attackers. Using a Vulnerability in Magento to Get Root-level Access

Over 200 websites were taken over by attackers. Using a Vulnerability in Magento to Get Root-level Access

CYBER ATTACKZerowl

Threat actors successfully exploited a serious authentication vulnerability to gain total system control, resulting in a critical security breach

TAMECAT Backdoor Steals Edge and Chrome Login Credentials

TAMECAT Backdoor Steals Edge and Chrome Login Credentials

CYBER ATTACKZerowl

High-ranking government and defense officials have been the target of a new, sophisticated espionage campaign known as "SpearSpecter," which has

Attackers Using Hugging Face Hosting to Deliver Android RAT Payload

Attackers Using Hugging Face Hosting to Deliver Android RAT Payload

CYBER ATTACKZerowl

A new Android threat campaign has emerged that uses social engineering combined with a legitimate machine learning platform to spread dangerous

Attackers Hijack 200+ Sites by Exploiting Magento Vulnerability

Attackers Hijack 200+ Sites by Exploiting Magento Vulnerability

CYBER ATTACKZerowl

Multiple independent intrusion campaigns targeting Magento e-commerce environments have resulted in the complete compromise of more than 200

Remote Code Execution Is Possible with 175K Exposed Ollama Hosts

Remote Code Execution Is Possible with 175K Exposed Ollama Hosts

CYBER ATTACKZerowl

A massive global network of 175,000 publicly exposed Ollama AI servers, posing significant remote code execution risks across 130 countries.

Wireshark 4.6.3 Released Fix for Vulnerabilities that Lead to DoS Attack and Crashes

Wireshark 4.6.3 Released Fix for Vulnerabilities that Lead to DoS Attack and Crashes

CYBER ATTACKZerowl

The most recent version of the most widely used network protocol analyzer in the world, Wireshark 4.6.3, has been formally released by the Wireshark

Malicious Open VSX Extension with 5000+ Users Spreading Malware

Malicious Open VSX Extension with 5000+ Users Spreading Malware

CYBER ATTACKZerowl

An angular-studio extension that looks popular.It has been discovered that ng-angular-extension is sending developers sophisticated malware This

Attacks Using Remote Code Execution Are Made Possible by a Serious Ivanti Endpoint Manager Flaw

Attacks Using Remote Code Execution Are Made Possible by a Serious Ivanti Endpoint Manager Flaw

CYBER ATTACKZerowl

Two serious flaws in Endpoint Manager Mobile (EPMM) that could enable unauthenticated remote code execution have been revealed by Ivanti This

Hackers Weaponized Open VSX Extension with Sophisticated Malware After Reaching 5060+ Downloads

Hackers Weaponized Open VSX Extension with Sophisticated Malware After Reaching 5060+ Downloads

CYBER ATTACKZerowl

After examining questionable extension behavior within the Open VSX ecosystem, Annex analysts discovered the malware This article explores malware

Threat Actors Using AI Generated Malicious Job Offers to Deploy PureRAT

Threat Actors Using AI Generated Malicious Job Offers to Deploy PureRAT

CYBER ATTACKZerowl

In an ongoing phishing campaign that spreads the PureRAT malware through fictitious job opportunities, a Vietnamese cybercrime group uses artificial

Swarmer Tool Evades EDR by Abusing Stealthy Windows Registry Persistence Techniques

Swarmer Tool Evades EDR by Abusing Stealthy Windows Registry Persistence Techniques

CYBER ATTACKZerowl

Swarmer represents a sophisticated advancement in registry-based persistence techniques, demonstrating how adversaries continue to exploit Windows

Top 5 this week

Page 37 of 44