10 matches found
UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign
Cybersecurity researchers have disclosed details of a financially motivated data theft extortion campaign that has targeted dozens of organizations across professional, legal, and financial services in the U.S. between January and May 2026. The activity has been attributed by Google Mandiant and...
UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors
Companies in the legal services, software-as-a-service SaaS providers, Business Process Outsourcers BPOs, and technology sectors in the U.S. have been targeted by a suspected China-nexus cyber espionage group to deliver a known backdoor referred to as BRICKSTORM. The activity, attributed to UNC52...
APT42 Hackers Pose as Journalists to Harvest Credentials and Access Cloud Data
The Iranian state-backed hacking outfit called APT42 is making use of enhanced social engineering schemes to infiltrate target networks and cloud environments. Targets of the attack include Western and Middle Eastern NGOs, media organizations, academia, legal services and activists, Google Cloud...
Vice Society Ransomware Attackers Targeted Dozens of Schools in 2022
The Vice Society cybercrime group has disproportionately targeted educational institutions, accounting for 33 victims in 2022 and surpassing other ransomware families like LockBit, BlackCat, BianLian, and Hive. Other prominent industry verticals targeted include healthcare, governments,...
Zero-day vulnerability leveraged to deploy Cuba Ransomware
Threat Level Attack Report For a detailed advisory, download the pdf file here Summary The threat actors behind the Cuba ransomware have stepped up their game by using a new Remote Access Trojan called ROMCOM and weaponizing a local privilege escalation vulnerabilityCVE-2022-24521. A wide range o...
aldrichlegalservices.com Cross Site Scripting vulnerability OBB-1412125
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
aldrichlegalservices.com Cross Site Scripting vulnerability OBB-1401929
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CMS Cameron McKenna 2013 Cross Site Scripting Vunlerability
CMS Cameron McKenna 2013 suffers from a cross site scripting vulnerability. The vendor has been notified of this issue. Note that this advisory has site-specific information. Product: CMS Cameron McKenna Web:http://www.cms-cmck.com Versions: CMS 2013 Date: 25/04/2013 Vendor Notified: 24/04 - 25/0...
CMS Cameron McKenna 2013 Cross Site Scripting
+=============================================================================================+ + ©CMS Cameron McKenna 2013 Allow Execute Evil Remote Code + +=============================================================================================+ Authors: Ivan Sanchez & Raul DiazDshellnoi...
162 Websites Defaced by Urdu hack
162 Websites Defaced by Urdu hack Websites : BEST-DUI-DEFENSE-ATTORNEYS.INFO CAR-INJURY-CLAIM.INFO CHARTER-A-JET.INFO CHEAP-CARINSURANCEQUOTATION.INFO CHEAP-LIFEASSURANCE-QUOTE.INFO CHEAP-SECUREDLOANS.INFO CHEAPCARIBBEANPACKAGES.INFO CHEAPWEBCONFERENCING.INFO CHILDMOLESTATIONLAWYER.INFO...