Red Hat recently announced a severe vulnerability in its DHCP client, CVE-2018-1111 could be exploited by malicious actors to execute arbitrary commands with administrator privileges on specific systems. A memberRead More →
Information security experts at the Kromtech Security Center found personal and confidential data belonging to between 15,000 and 20,000 Indian participants from the 2015-2018 cricket seasons. The authority that should protectRead More →
Today, we are all aware of the means that governments use to spy on citizens, but this should not be so simple. To allow surveillance; by law, authorities must provideRead More →
Recently, Lenovo released security patches for the CVE-2017-3775 high-severity vulnerability in the Secure Boot function on System x servers. Information security researchers commented that standard operator settings disable signature verification, asRead More →
Researchers found a hidden malware inside the software in the Ubuntu Snap store. The information security experts found that two applications, which appeared to be normal, hosted by Canonical, containedRead More →
A team of information security experts released a warning about a group of vulnerabilities that affect users of PGP and S / MIME. EFF kept in communication with the research group andRead More →
In late April, two security companies (Qihoo360 and Kaspersky) independently discovered a zero-day for Internet Explorer (CVE-2018-8174), which was used in targeted attacks for espionage purposes. This marks two years since aRead More →
The Process Doppelgänging technique was first presented in December 2017 at the BlackHat conference. Since the presentation several threat actors have started using this sophisticated technique in an attempt to bypass modernRead More →
A team of information security experts explains that a domain name represents some kind of label for IP addresses on the Internet. Since some companies move their infrastructure to theRead More →
A team of researchers from Vrije University in Amsterdam and the University of Cyprus found a way to launch Rowhammer attacks through network packets and network cards. This, according toRead More →
IBM recently banned all removable storage, throughout the company; this is a new policy that aims to avoid financial and reputational damage from a lost or misused USB drive. ShamlaRead More →
Just a couple of months ago, an information security expert, nicknamed LANDAVE or Dave, found security vulnerability in the 7-Zip utility. A group of information security professionals commented that 7-ZipRead More →
LG recently patched two critical vulnerabilities on the default keyboard of all its smartphones, including flagship phones; the vulnerabilities could have been used to execute code remotely with elevated privileges,Read More →
Recently we saw an attempt to hide a back door in a code library, and today there is a new case. This time, information security experts found the backdoor in a PythonRead More →
The baseStriker technique, uncovered by information security researchers from the company Avanan, allows you to bypass anti-phishing filters by dividing and masking a malicious link using a tag called <base>Read More →
The system responsible for controlling the operations of “Bycyklen”, the bicycle exchange system of the city of Copenhagen, Denmark, was hacked over the weekend by unknown actors. According to information security experts,Read More →
Information security professionals explain that Harness is the remote access payload with the ability to provide a remote interactive PowerShell interface from a Windows system to almost any TCP socket. TheRead More →
As an introduction, brut3k1t is a bruteforce module on the server side that supports dictionary attacks for various protocols, information security experts say. Some of the current protocols that are complete andRead More →
Vulnerability in Drupal CMS turned popular websites into Monero Mining Platform. The criptockacking is becoming a plague that affects consumers around the world, and what are even worse, experts doRead More →
Drupwn is a tool that helps efficiently gather drupal information. The information security expert says that there are two tested versions admitted; Drupal 7 and Drupal 8. https://asciinema.org/a/J6dQmUJVskyHV07iARITfoLan Drupwn can be executedRead More →
