18342 matches found
Top 20 Most Popular Hacking Tools in 2023
As last year, this year we made a ranking with the most popular tools between January and December 2023. The tools of this year encompass a diverse range of cybersecurity disciplines, including AI-Enhanced Penetration Testing, Advanced Vulnerability Management, Stealth Communication Techniques,...
New Rugmi Malware Loader Surges with Hundreds of Daily Detections
A new malware loader is being used by threat actors to deliver a wide range of information stealers such as Lumma Stealer aka LummaC2, Vidar, RecordBreaker aka Raccoon Stealer V2, and Rescoms. Cybersecurity firm ESET is tracking the trojan under the name Win/TrojanDownloader.Rugmi. "This malware ...
CVE-2023-7116
creationtimestamp| type| source ---|---|--- 2023-12-27 17:27:11+00:00| seen| https://t.me/ctinow/159708 2024-01-19 15:16:30+00:00| seen| https://t.me/ctinow/170229 2025-06-24 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lseymlk2sg26...
How to Build a Cybersecurity Culture in Your Company
Decoding the Essential Components of Cyber Safeguard Culture In today's era, marked by copious dependencies on digital technologies, strengthening defenses against digital security vulnerabilities has become more than just a choice, it's a critical necessity. Establishing a culture of cyber...
Attacks, Vulnerabilities and Actors 18 December to 24 December 2023
For a detailed threat digest, download the pdf file here Summary HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of 15 executed attacks, 4 instances of adversary activity, and 7 exploited vulnerabilities,...
How to recognize AI-generated phishing mails
Phishing is the art of sending an email with the aim of getting users to open a malicious file or click on a link to then steal credentials. But most phishers arent very good, and the success rate is relatively low: In 2021, the average click rate for a phishing campaign was 17.8%. However, now...
Cloud Atlas' Spear-Phishing Attacks Target Russian Agro and Research Companies
The threat actor referred to as Cloud Atlas has been linked to a set of spear-phishing attacks on Russian enterprises. Targets included a Russian agro-industrial enterprise and a state-owned research company, according to a report from F.A.C.C.T., a standalone cybersecurity company formed after...
Hackers Stole $59 Million of Crypto Via Malicious Google and X Ads
By Deeba Ahmed Corrected sentence: "Anti-scam solutions provider Scam Sniffer and cybersecurity firm Check Point Research CPR have warned of increasing attacks aimed at your crypto funds through malicious ads." This is a post from HackRead.com Read the original post: Hackers Stole $59 Million of...
CVE-2023-48815
creationtimestamp| type| source ---|---|--- 2023-12-23 09:41:51+00:00| seen| https://t.me/ctinow/158748...
CVE-2023-5962
CVE-2023-5962 affects MOXA ioLogik E1200 Series firmware versions v3.3 and prior. The root cause is the use of a weak cryptographic algorithm in the device’s crypto implementation, which can compromise data confidentiality and may enable unexpected authorization. The CVSSv3.1 metrics indicate a N...
Mallox Ransomware A Resurgent Threat Exploiting MS-SQL Flaws
Summary: Mallox is a resilient Ransomware-as-a-Service RaaS threat, utilizing tactics like exploiting MS-SQL vulnerabilities and employing brute force attacks. Operating with a prolonged presence, Malloxs recent variant, "Mallox.Resurrection," exhibits consistent functionalities, emphasizing the...
Microsoft Warns of New 'FalseFont' Backdoor Targeting the Defense Sector
Organizations in the Defense Industrial Base DIB sector are in the crosshairs of an Iranian threat actor as part of a campaign designed to deliver a never-before-seen backdoor called FalseFont. The findings come from Microsoft, which is tracking the activity under its weather-themed moniker Peach...
SSH Attack Surface (CVE-2023-48795): Find and Patch With CyberSecurity Asset Management Before the Grinch Arrives
Secure Shell Protocol SSH has been a cornerstone of cryptography and security since it was developed in early 1995. Organizations rely on SSH for secure communications within several popular software products. The recent Terrapin Attack highlights the importance of maintaining full visibility of...
CVE-2023-51027
The CVE-2023-51027 entry concerns the TOTOLINK EX1800T (version 9.1.0cu.2112_B20220316) with a vulnerability in the apcliAuthMode parameter of the setWiFiExtenderConfig interface in cstecgi.cgi that allows unauthorized arbitrary command execution. Multiple sources corroborate that the issue origi...
CVE-2023-6546
creationtimestamp| type| source ---|---|--- 2023-12-21 21:21:57+00:00| seen| https://t.me/ctinow/157959 2024-01-14 15:12:08+00:00| seen| https://t.me/ctinow/168049 2024-01-22 19:10:41+00:00| published-proof-of-concept| https://t.me/linkersec/239 2024-01-23 04:34:33+00:00|...
Webinar recap: Ransomware gangs and Living Off The Land attacks (LOTL)
Discover the intersection of Ransomware-as-a-Service RaaS gangs and Living Off The Land LOTL attacks in our latest webinar, now available on-demand, led by cybersecurity experts Ian Thomas, Mark Stockley, and Bill Cozens. The webinar revealed how RaaS gangs use LOTL tactics, leveraging legitimate...
Shifting from reCAPTCHA to hCaptcha
We are adding another CAPTCHA vendor and helping our customers migrate from Googles reCAPTCHA to hCaptcha. Why We Are Making This Change We continuously evaluate our security measures to ensure they align with the evolving landscape of threats. After carefully evaluating several different CAPTCHA...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-49897 FXC AE1021, AE1021PE OS Command Injection Vulnerability CVE-2023-47565 QNAP VioStor NVR OS Command Injection Vulnerability These types of vulnerabilities...
German Authorities Dismantle Dark Web Hub 'Kingdom Market' in Global Operation
German law enforcement has announced the disruption of a dark web platform called Kingdom Market that specialized in the sales of narcotics and malware to "tens of thousands of users." The exercise, which involved collaboration from authorities from the U.S., Switzerland, Moldova, and Ukraine,...
