Sign in Subscribe

Vulnerability

CISA Releases Four New ICS Advisories Addressing Critical Vulnerabilities

CISA Releases Four New ICS Advisories Addressing Critical Vulnerabilities

On September 5, 2024, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued four new advisories highlighting vulnerabilities in Industrial Control Systems (ICS) used across multiple sectors.

Akira Ransomware Campaign Exploits SonicWall SSLVPN Vulnerability

Akira Ransomware Campaign Exploits SonicWall SSLVPN Vulnerability

Akira ransomware affiliates leverage a vulnerability (CVE-2024-40766) in SonicWall's firewall devices, compromising SSLVPN user accounts not integrated with centralized authentication solutions

Chinese APT Exploits Visual Studio Code to Target Southeast Asian Governments

Chinese APT Exploits Visual Studio Code to Target Southeast Asian Governments

On September 6, 2024, Unit 42 researchers released a report detailing a new cyber espionage campaign by the Chinese Advanced Persistent Threat (APT) group known as "Stately Taurus."

Critical Zero-Day Vulnerability in Popular VPN Service Allows Remote Code Execution

Critical Zero-Day Vulnerability in Popular VPN Service Allows Remote Code Execution

The vulnerability, CVE-2023-3420, was patched in the V8 engine in June 2023. However, the WebView component within WeChat was not updated, exposing millions of users to potential attacks.

CISA Adds Three Exploited Vulnerabilities to Known Catalog

CISA Adds Three Exploited Vulnerabilities to Known Catalog

These vulnerabilities, all of which have been actively exploited, include two related to Draytek VigorConnect devices and one affecting Kingsoft WPS Office.

Godzilla Fileless Backdoor Exploits CVE-2023-22527 in Atlassian Confluence

Godzilla Fileless Backdoor Exploits CVE-2023-22527 in Atlassian Confluence

The Godzilla webshell, a Chinese-language malware, leverages AES encryption to evade detection and remains memory-resident, making it particularly challenging for legacy anti-virus solutions to detect.

Cryptojacking Campaign Exploits CVE-2023-22527 in Atlassian Confluence

Cryptojacking Campaign Exploits CVE-2023-22527 in Atlassian Confluence

On August 28, 2024, Trend Micro released a report detailing the exploitation of CVE-2023-22527, a critical vulnerability in Atlassian Confluence. This vulnerability, initially disclosed on January 16, 2024, affects Confluence Data Center and Confluence Server.