Ukraine Warns of New Phishing Campaign Targeting Government Computers

The Computer Emergency Response Team of Ukraine CERT-UA has warned of a new phishing campaign that masquerades as the Security Service of Ukraine to distribute malware capable of remote desktop access. The agency is tracking the activity under the name UAC-0198. More than 100 computers are...

EastWind Attack Deploys PlugY and GrewApacha Backdoors Using Booby-Trapped LNK Files

The Russian government and IT organizations are the target of a new campaign that delivers a number of backdoors and trojans as part of a spear-phishing campaign codenamed EastWind. The attack chains are characterized by the use of RAR archive attachments containing a Windows shortcut LNK file...

CVE-2024-20453

creationtimestamp| type| source ---|---|--- 2024-08-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1350 2024-08-09 14:49:05+00:00| seen| https://t.me/truesecator/6077...

CVE-2024-20450

creationtimestamp| type| source ---|---|--- 2024-08-07 20:19:58+00:00| seen| https://t.me/cvedetector/2727 2024-08-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1350 2024-08-09 14:49:05+00:00| seen| https://t.me/truesecator/6077...

CVE-2024-20454

creationtimestamp| type| source ---|---|--- 2024-08-07 20:19:57+00:00| seen| https://t.me/cvedetector/2726 2024-08-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1350 2024-08-09 14:49:05+00:00| seen| https://t.me/truesecator/6077...

CVE-2024-20451

creationtimestamp| type| source ---|---|--- 2024-08-07 20:19:52+00:00| seen| https://t.me/cvedetector/2724 2024-08-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1350 2024-08-09 14:49:05+00:00| seen| https://t.me/truesecator/6077...

Kazakh Organizations Targeted by 'Bloody Wolf' Cyber Attacks

Organizations in Kazakhstan are the target of a threat activity cluster dubbed Bloody Wolf that delivers a commodity malware called STRRAT aka Strigoi Master. "The program selling for as little as $80 on underground resources allows the adversaries to take control of corporate computers and hijac...

government-auctions-guide.com Cross Site Scripting vulnerability OBB-3952945

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

May 19, 2019—KB4505056 (OS Build 17763.504)

May 19, 2019—KB4505056 OS Build 17763.504 Applies To Windows 10, version 1809, all editions Windows Server 2019, all editions Improvements and fixes This update includes quality improvements. Key changes include: Addresses an issue that may prevent access to some gov.uk websites that don’t suppor...

May 19, 2019—KB4505062 (OS Build 16299.1150)

May 19, 2019—KB4505062 OS Build 16299.1150 Applies To Windows 10, version 1709, all editions Note Reminder: March 12th and April 9th will be the last two Delta updates for Windows 10, version 1709. Security and quality updates will continue to be available via the express and full cumulative upda...

APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt Strike

Cisco Talos discovered a malicious campaign that compromised a Taiwanese government-affiliated research institute that started as early as July 2023, delivering the ShadowPad malware, Cobalt Strike and other customized tools for post-compromise activities. The activity conducted on the victim...

CVE-2024-42094

creationtimestamp| type| source ---|---|--- 2024-07-29 21:19:28+00:00| seen| https://t.me/cvedetector/1909 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

CVE-2024-37381

creationtimestamp| type| source ---|---|--- 2024-07-18 10:13:10+00:00| seen| https://t.me/HackingInsights/6482 2024-07-19 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1339 2024-07-29 08:46:01+00:00| seen| https://t.me/cvedetector/1814...

CVE-2024-20401

creationtimestamp| type| source ---|---|--- 2024-07-17 19:53:48+00:00| seen| https://t.me/cvedetector/1104 2024-07-18 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1335 2024-07-18 10:13:21+00:00| published-proof-of-concept| https://t.me/HackingInsights/6501 2024-07-18...

US Senators Secretly Work to Block Safeguards Against Surveillance Abuse

Senator Mark Warner is trying to pass new limits on when the government can wiretap Americans. At least two senators are quietly trying to stop him...

Five Eyes Alliance Accuses Chinese APT40 for Hacking Government Networks

Australia isnt alone! The Five Eyes US, UK, Canada, NZ along with Japan and South Korea join forces…...

CVE-2024-37985

creationtimestamp| type| source ---|---|--- 2024-07-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1324 2024-07-10 09:47:45+00:00| seen| https://t.me/kasperskyb2b/1337 2024-07-10 13:21:59+00:00| seen| https://t.me/truesecator/5952 2024-07-11 17:56:08+00:00| seen|...

CVE-2024-38060

creationtimestamp| type| source ---|---|--- 2024-07-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1324...

Rapid7 completes IRAP PROTECTED assessment for Insight Platform solutions

Exciting news from Australia! Rapid7 has successfully completed an Information Security Registered Assessors Program IRAP assessment to PROTECTED Level for several of our Insight Platform solutions. What is IRAP? An IRAP assessment is an independent assessment of the implementation,...

New APT Group "CloudSorcerer" Targets Russian Government Entities

A previously undocumented advanced persistent threat APT group dubbed CloudSorcerer has been observed targeting Russian government entities by leveraging cloud services for command-and-control C2 and data exfiltration. Cybersecurity firm Kaspersky, which discovered the activity in May 2024, said...