On Thursday, VMWare, a cloud computing and virtualisation technology firm, pushed an update to fix a critical vulnerability in its Cloud Director product. The vulnerability could be exploited to execute codes remotely. The vulnerability labelled CVE-2022-22966 scores 9.1 out of…
Hashnode, a developer-oriented blogging platform, has a previously undiscovered local file inclusion (LFI) vulnerability that might be exploited to gain access to sensitive data such as SSH keys, the server’s IP address, and other network information. The LFI is based…
Phishing emails with password-protected ZIP archive attachments containing malicious MSI Windows Installer packages are now being used by the Qbot botnet to spread malware payloads. This is the first time the Qbot operators have used this strategy, which differs from…
Nation-state actors are using specialised malware to maintain access to industrial control systems (ICS) and supervisory control and data acquisition (SCADA) equipment, according to the US government. In an alert, numerous US agencies stated that “APT actors have created custom-made…
Fakecalls is a financial malware that targets Android users, hijacking their calls to a bank’s customer service number and connecting them directly with hackers. About Fakecalls scam The spyware, according to Kaspersky, masquerades as a mobile app from well-known banks…
RaidForums, an illegal dark web marketplace, has been closed, and its infrastructure seized in an international law enforcement Operation TOURNIQUET. Europol’s European Cybercrime Center has coordinated the operation. The Department of Justice, in a press release, announced the taking down…
In harmful campaigns, a Traffic Direction System (TDS) is used to lead individuals who fit a specific profile to phishing sites. The FakeUpdate campaign Avast researchers found Parrot TDS and revealed that it’s presently being utilised in the FakeUpdate (aka…
On Monday, Google said that it’s suing a threat actor who has been tracked operating fraudulent websites to dupe people into buying puppies that don’t exist. “The actor used a network of fraudulent websites that claimed to sell basset hound…
Unprotected API could expose names, places, times of bookings made using app An open-source scheduling platform has an access control vulnerability. Unauthenticated attackers had easy access to personally identifiable information (PII) thanks to Easy!Appointments, according to a security researcher. The…
Egress reports that 56% of IT leaders say their non-technical staff are partially prepared or not at all prepared for a security attack. A survey of 600 hundred IT security leaders from several industries regarding organisations’ security posture in a…
