LATEST

ZerOwl — Find Vulnerabilities Before Hackers Do
Multiple TP-Link Vulnerabilities Allow Attackers to Bypass Authentication and Escalate Privileges

Multiple TP-Link Vulnerabilities Allow Attackers to Bypass Authentication and Escalate Privileges

CYBER ATTACKZerowl

TP-Link has acknowledged multiple severe vulnerabilities impacting Aginet networking devices managed by ISPs, including mesh systems, routers, PON units.

Microsoft SharePoint Server Vulnerability Allows Attackers to Inject and Execute Malicious Code Remotely

Microsoft SharePoint Server Vulnerability Allows Attackers to Inject and Execute Malicious Code Remotely

CYBER ATTACKZerowl

A newly disclosed flaw in Microsoft SharePoint Server has rekindled concerns among enterprise IT departments, as security researchers unveil how attackers.

Microsoft Exchange Server Vulnerabilities Enable DoS, Privilege Escalation, and RCE Attacks

Microsoft Exchange Server Vulnerabilities Enable DoS, Privilege Escalation, and RCE Attacks

CYBER ATTACKZerowl

Microsoft has released patches for several Exchange Server vulnerabilities that could lead to denial-of-service, privilege escalation, remote code.

Malicious VS Code Extension Drops Detached Python Payload Outside the Extension Host

Malicious VS Code Extension Drops Detached Python Payload Outside the Extension Host

CYBER ATTACKZerowl

A dangerous VS Code extension called "Solidity Pro" is infiltrating cryptocurrency developers' environments with a sophisticated multi-stage attack.

Magecart Campaign Uses Google Tag Manager To Steal Credit Card Data

Magecart Campaign Uses Google Tag Manager To Steal Credit Card Data

CYBER ATTACKZerowl

A notorious Magecart group is utilizing Google Tag Manager (GTM) to silently inject custom scripts onto e-commerce sites, effectively turning trusted.

HACKERAI Malware Turns GitHub Gists Into a Command-and-Control Channel

HACKERAI Malware Turns GitHub Gists Into a Command-and-Control Channel

CYBER ATTACKZerowl

A newly discovered malware framework called HACKERAI C2 Agent is utilizing GitHub Gists as a covert communication channel for attackers to execute.

Fortinet Patches Multiple Authentication Vulnerabilities in FortiWeb, FortiManager, and FortiClient

Fortinet Patches Multiple Authentication Vulnerabilities in FortiWeb, FortiManager, and FortiClient

CYBER ATTACKZerowl

Fortinet has released patches addressing authentication vulnerabilities across its FortiWeb, FortiManager, and FortiClient product lines, urging.

Eclipse Ransomware Launches RaaS Platform Targeting Windows, Linux, and ESXi Infrastructure

Eclipse Ransomware Launches RaaS Platform Targeting Windows, Linux, and ESXi Infrastructure

CYBER ATTACKZerowl

A cybercriminal gang known as EclipseSupport is promoting a new Ransomware-as-a-Service (RaaS) operation called Eclipse Ransomware on forums This article.

Dysphoria Botnet Compromises 296,000 IoT Devices for DDoS and Residential Proxy Operations

Dysphoria Botnet Compromises 296,000 IoT Devices for DDoS and Residential Proxy Operations

CYBER ATTACKZerowl

A Special Report has identified approximately 296,000 internet-connected devices compromised by the Dysphoria botnet, marking an expansion of an IoT.

DCRat Campaign Hides Malware Archive Inside SVG Using HTML Smuggling

DCRat Campaign Hides Malware Archive Inside SVG Using HTML Smuggling

CYBER ATTACKZerowl

A new DCRat operation employs an old trick: it uses SVG files to hide malicious software within phishing emails. The scheme starts with fake notifications.

Top 5 this week

Page 59 of 316