Mobile security specialists from IMB Trusteer have confirmed the reappearance of BrazKing, a banking Trojan for Android devices distributed through third-party applications and which employs a complex SMS phishing campaignRead More →
In its latest statement, the U.S. State Department (DOJ) offered a $10 million reward to anyone who provides information about a group of Iranian citizens accused of deploying cyberattacks inRead More →
Cybersecurity specialists report the detection of three vulnerabilities in GUIcon Eurotherm, a solution developed by the technology company Schneider Electric. According to the report, the successful exploitation of the detectedRead More →
The Federal Bureau of Investigation (FBI) issued a statement warning about the detection of a zero-day vulnerability in FatPipe products, which has been actively exploited for much of 2021. TheRead More →
This week, Microsoft reported the detection of a sensitive information leak vulnerability that affects many Azure Active Directory (AD) deployments. The flaw was tracked as CVE-2021-42306 and received a scoreRead More →
GitHub researchers announced the detection of two severe security flaws in NPM, the Node.js package manager. According to the report, one of these flaws could be exploited by threat actorsRead More →
The operators of the dangerous Emotet malware attacked again after almost a year of inactivity, this time in the form of a spam campaign that aims to deliver malicious filesRead More →
Cybersecurity specialists reported the finding of two vulnerabilities in Fortinet FortiPortal. According to the report, successful exploitation of these flaws would allow the deployment of multiple attack scenarios. Below isRead More →
Intel security teams announced the detection of two critical vulnerabilities in a wide variety of products and whose exploitation would allow threat actors to perform privilege escalation attacks on affectedRead More →
Recent research details a method to exploit a security flaw in the Amazon Web Services (AWS) API Gateway through an HTTP header smuggling attack. Pentesting specialist Daniel Thatcher, in chargeRead More →
