17662 matches found
Salt Typhoon’s Reach Continues to Grow
The US government has identified a ninth telecom that was successfully hacked by Salt Typhoon...
2024 in AI: It’s changed the world, but it’s not all good
A popular saying is: “To err is human, but to really foul things up you need a computer.” Even though the saying is older than you might think, it did not come about earlier than the concept of artificial intelligence AI. And as long as we have been waiting for AI technology to become commonplace...
Cloud Atlas Deploys VBCloud Malware: Over 80% of Targets Found in Russia
The threat actor known as Cloud Atlas has been observed using a previously undocumented malware called VBCloud as part of its cyber attack campaigns targeting "several dozen users" in 2024. "Victims get infected via phishing emails containing a malicious document that exploits a vulnerability in...
CVE-2024-45805 OpenCTI leaks support information due to inadequate access control
OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information SETTINGSSUPPORT. This is due to inadequate access control for support information...
CVE-2024-45805
Affected software: OpenCTI Open-Source Threat Intelligence Platform (prior to 6.3.0). Vulnerability / root cause: Inadequate access control allowed general users to access information intended for admin and support roles via the endpoint/storage/get/support/UUID/UUID.zip, exposing the UUID throug...
SEO Poisoning: How Cybercriminals Are Turning Search Engines into Traps
Stay protected from SEO poisoning, a cyber threat exploiting search engine rankings to spread malware and phishing scams.…...
CVE-2024-52535
creationtimestamp| type| source ---|---|--- 2024-12-25 15:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le5atoyh4j25 2024-12-25 17:09:26+00:00| seen| https://t.me/cvedetector/13626 2024-12-26 13:58:43+00:00| seen|...
Iran's Charming Kitten Deploys BellaCPP: A New C++ Variant of BellaCiao Malware
The Iranian nation-state hacking group known as Charming Kitten has been observed deploying a C++ variant of a known malware called BellaCiao. Russian cybersecurity company Kaspersky, which dubbed the new version BellaCPP , said it discovered the artifact as part of a "recent" investigation into ...
The Impact of Supply Chain Attacks on the Global Landscape
Background From the Silk Road’s ancient trade routes to today’s global networks, supply chains have shaped empires, fueled revolutions, and driven economies. Now, in an age of digital transformation, they’ve evolved from logistical backbones into dynamic, tech-driven ecosystems. Powered by digita...
CVE-2024-55539
Weak algorithm used to sign RPM package. The following products are affected: Acronis Cyber Protect Cloud Agent Linux before build 39185, Acronis Cyber Protect 16 Linux before build 39938...
CVE-2024-55539
Weak algorithm used to sign RPM package. The following products are affected: Acronis Cyber Protect Cloud Agent Linux before build 39185, Acronis Cyber Protect 16 Linux before build 39938...
CVE-2024-55539
Weak algorithm used to sign RPM package. The following products are affected: Acronis Cyber Protect Cloud Agent Linux before build 39185, Acronis Cyber Protect 16 Linux before build 39938...
CVE-2024-55539
CVE-2024-55539 affects Acronis Cyber Protect Cloud Agent (Linux) and Acronis Cyber Protect 16 (Linux) via use of a weak algorithm to sign RPM packages. Red Hat and other sources corroborate the impact on the listed builds: Acronis Cyber Protect Cloud Agent before 39185 and Acronis Cyber Protect 1...
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips
The online world never takes a break, and this week shows why. From ransomware creators being caught to hackers backed by governments trying new tricks, the message is clear: cybercriminals are always changing how they attack, and we need to keep up. Hackers are using everyday tools in harmful...
Top Open Source API Security Tools
The modern world relies on Application Programming Interfaces APIs. They allow applications to communicate with each other, servers, and consumers to facilitate data sharing and simplify application development. Without them, the internet would be unrecognizable. However, APIs also present a...
PT-2025-3277 · Acronis · Acronis Cyber Protect 16
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 Windows versions prior to build 39169 Description: The web installer integrity check used a weak hash algorithm. This issue affects the Acronis Cyber Protect 16 Windows product. Recommendations: For Acronis Cyber...
Acronis Cyber Protect Cloud Agent 加密问题漏洞
Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. An encryption issue vulnerability exists in versions prior to Acronis Cyber Protect Cloud Agent build39185 that stems from a weak algorithm used to sign RPM packages...
Fortinet Releases Security Updates for FortiManager
Fortinet released a security update to address a vulnerability in FortiManager. A remote cyber threat actor could exploit this vulnerability to take control of an affected system. Users and administrators are encouraged to review the following Fortinet Security Bulletin and apply the necessary...
Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus Malware
The Lazarus Group, an infamous threat actor linked to the Democratic People's Republic of Korea DPRK, has been observed leveraging a "complex infection chain" targeting at least two employees belonging to an unnamed nuclear-related organization within the span of one month in January 2024. The...
Hackers Exploiting Critical Fortinet EMS Vulnerability to Deploy Remote Access Tools
A now-patched critical security flaw impacting Fortinet FortiClient EMS is being exploited by malicious actors as part of a cyber campaign that installed remote desktop software such as AnyDesk and ScreenConnect. The vulnerability in question is CVE-2023-48788 CVSS score: 9.3, an SQL injection bu...