Sign in Subscribe

Vulnerability

New Mirai Variant Exploits Zero-Day in AVTECH Cameras: CVE-2024-7029

New Mirai Variant Exploits Zero-Day in AVTECH Cameras: CVE-2024-7029

Akamai Security Intelligence and Response Team (SIRT) released a detailed report on a new botnet campaign that exploits a previously undisclosed zero-day vulnerability in AVTECH CCTV cameras. The vulnerability, CVE-2024-7029, enables remote code execution (RCE).

BlackByte Ransomware Exploits New VMware ESXi Vulnerability in Latest Attack

BlackByte Ransomware Exploits New VMware ESXi Vulnerability in Latest Attack

On August 28, 2024, Cisco Talos Incident Response (Talos IR) released a detailed threat spotlight report on the BlackByte ransomware group, revealing the group's adaptation of newly disclosed vulnerabilities to enhance their attack capabilities.

ESET Uncovers Two Critical Code Execution Vulnerabilities in WPS Office, Exploited by APT-C-60

ESET Uncovers Two Critical Code Execution Vulnerabilities in WPS Office, Exploited by APT-C-60

South Korea-aligned cyber espionage group APT-C-60 has exploited these vulnerabilities to target individuals in East Asian countries. ESET's research has uncovered the technical nuances of these exploits

The Versa Director Zero-Day Exploitation

The Versa Director Zero-Day Exploitation

On August 27, 2024, Black Lotus Labs revealed the active exploitation of a zero-day vulnerability in Versa Director servers. Identified as CVE-2024-39717, this vulnerability impacts all Versa Director versions before 22.1.4. CISA added CVE-2024-39717 to the KEV.

CISA Adds One Known Exploited Vulnerability to Catalogue

CISA Adds One Known Exploited Vulnerability to Catalogue

On August 26, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) announced the addition of a newly identified vulnerability to its Known Exploited Vulnerabilities Catalog.

Exploration of Sandboxing and AppData Transparency, Consent, and Control Report

Exploration of Sandboxing and AppData Transparency, Consent, and Control Report

Initially presented at Blackhat USA 2024, the report highlights how these vulnerabilities can be exploited, providing valuable insights into the evolving security challenges within Apple's operating system.

Mobile App Vulnerabilities: How Popular Apps Leak Sensitive Data

Mobile App Vulnerabilities: How Popular Apps Leak Sensitive Data

On August 27, 2024, Symantec released a report highlighting the alarming vulnerabilities found in several popular mobile apps, both on Android and iOS platforms. The report reveals that these apps are failing to protect sensitive user data