Wiz achieves FedRAMP Moderate authorization

Wiz is now the fastest company to be listed FedRAMP Moderate Authorized on the FedRAMP Marketplace, making it easier for government agencies to effectively protect their cloud environment with Wiz’s CNAPP...

Why Hardsec Matters: From Protecting Critical Services to Enhancing Resilience

Traditionally, the focus has been on defending against digital threats such as malware, ransomware, and phishing attacks by detecting them and responding. However, as cyber threats become more sophisticated. There is a growing recognition of the importance of measures that stop new attacks before...

Ukraine Warns of New Phishing Campaign Targeting Government Computers

The Computer Emergency Response Team of Ukraine CERT-UA has warned of a new phishing campaign that masquerades as the Security Service of Ukraine to distribute malware capable of remote desktop access. The agency is tracking the activity under the name UAC-0198. More than 100 computers are...

EastWind Attack Deploys PlugY and GrewApacha Backdoors Using Booby-Trapped LNK Files

The Russian government and IT organizations are the target of a new campaign that delivers a number of backdoors and trojans as part of a spear-phishing campaign codenamed EastWind. The attack chains are characterized by the use of RAR archive attachments containing a Windows shortcut LNK file...

CVE-2024-20453

creationtimestamp| type| source ---|---|--- 2024-08-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1350 2024-08-09 14:49:05+00:00| seen| https://t.me/truesecator/6077...

CVE-2024-20450

creationtimestamp| type| source ---|---|--- 2024-08-07 20:19:58+00:00| seen| https://t.me/cvedetector/2727 2024-08-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1350 2024-08-09 14:49:05+00:00| seen| https://t.me/truesecator/6077...

CVE-2024-20454

creationtimestamp| type| source ---|---|--- 2024-08-07 20:19:57+00:00| seen| https://t.me/cvedetector/2726 2024-08-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1350 2024-08-09 14:49:05+00:00| seen| https://t.me/truesecator/6077...

CVE-2024-20451

creationtimestamp| type| source ---|---|--- 2024-08-07 20:19:52+00:00| seen| https://t.me/cvedetector/2724 2024-08-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1350 2024-08-09 14:49:05+00:00| seen| https://t.me/truesecator/6077...

Kazakh Organizations Targeted by 'Bloody Wolf' Cyber Attacks

Organizations in Kazakhstan are the target of a threat activity cluster dubbed Bloody Wolf that delivers a commodity malware called STRRAT aka Strigoi Master. "The program selling for as little as $80 on underground resources allows the adversaries to take control of corporate computers and hijac...

government-auctions-guide.com Cross Site Scripting vulnerability OBB-3952945

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt Strike

Cisco Talos discovered a malicious campaign that compromised a Taiwanese government-affiliated research institute that started as early as July 2023, delivering the ShadowPad malware, Cobalt Strike and other customized tools for post-compromise activities. The activity conducted on the victim...

CVE-2024-42094

creationtimestamp| type| source ---|---|--- 2024-07-29 21:19:28+00:00| seen| https://t.me/cvedetector/1909 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

CVE-2024-37381

creationtimestamp| type| source ---|---|--- 2024-07-18 10:13:10+00:00| seen| https://t.me/HackingInsights/6482 2024-07-19 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1339 2024-07-29 08:46:01+00:00| seen| https://t.me/cvedetector/1814...

CVE-2024-20401

creationtimestamp| type| source ---|---|--- 2024-07-17 19:53:48+00:00| seen| https://t.me/cvedetector/1104 2024-07-18 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1335 2024-07-18 10:13:21+00:00| published-proof-of-concept| https://t.me/HackingInsights/6501 2024-07-18...

US Senators Secretly Work to Block Safeguards Against Surveillance Abuse

Senator Mark Warner is trying to pass new limits on when the government can wiretap Americans. At least two senators are quietly trying to stop him...

Five Eyes Alliance Accuses Chinese APT40 for Hacking Government Networks

Australia isnt alone! The Five Eyes US, UK, Canada, NZ along with Japan and South Korea join forces…...

CVE-2024-37985

creationtimestamp| type| source ---|---|--- 2024-07-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1324 2024-07-10 09:47:45+00:00| seen| https://t.me/kasperskyb2b/1337 2024-07-10 13:21:59+00:00| seen| https://t.me/truesecator/5952 2024-07-11 17:56:08+00:00| seen|...

CVE-2024-38060

creationtimestamp| type| source ---|---|--- 2024-07-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1324...

Rapid7 completes IRAP PROTECTED assessment for Insight Platform solutions

Exciting news from Australia! Rapid7 has successfully completed an Information Security Registered Assessors Program IRAP assessment to PROTECTED Level for several of our Insight Platform solutions. What is IRAP? An IRAP assessment is an independent assessment of the implementation,...

New APT Group "CloudSorcerer" Targets Russian Government Entities

A previously undocumented advanced persistent threat APT group dubbed CloudSorcerer has been observed targeting Russian government entities by leveraging cloud services for command-and-control C2 and data exfiltration. Cybersecurity firm Kaspersky, which discovered the activity in May 2024, said...