100 matches found
CVE-2024-29019
ESPHome is a system to control microcontrollers remotely through Home Automation systems. API endpoints in dashboard component of ESPHome version 2023.12.9 command line installation are vulnerable to Cross-Site Request Forgery CSRF allowing remote attackers to carry out attacks against a logged...
Russian UAC-0063 Targets Europe and Central Asia with Advanced Malware
UAC-0063: A Russian-linked threat actor targeting Central Asia and Europe with sophisticated cyberespionage campaigns, including weaponized documents, data…...
Intel Officials Warned Police That US Cities Aren’t Ready for Hostile Drones
In a previously unreported August memo, the Department of Homeland Security urged state and local police to conduct exercises to test their ability to respond to weaponized drones...
Your Phone Won’t Be the Next Exploding Pager
Thousands of beepers and two-way radios exploded in attacks against Hezbollah, but mainstream consumer devices like smartphones aren’t likely to be weaponized the same way...
2024 Midyear Threat Landscape Review
As we navigate the complexities of 2024, its crucial to pause and reflect on the evolving threat landscape that surrounds us. This moment offers a unique opportunity to scrutinize our triumphs and missteps, understand the events that have decisively shaped our environment, and consider those that...
MAL-2024-12186 Malicious code in a-oder (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f7e835cce84c3bd2876cea21212f1d41b81ee568e92e90bb0ba1e2c2a1ba1370 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...
Malicious code in soali (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6c73ab625e57bbab36d706b35ebf4f344a01e77b5f6f53b71765e029a845ee12 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...
Malicious code in ebe (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7f86097ff84bdd8007ecb73c8e4a3d412500e503469684998f78fd39b14e51d5 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...
Malicious code in a-oder (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f7e835cce84c3bd2876cea21212f1d41b81ee568e92e90bb0ba1e2c2a1ba1370 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...
MAL-2024-12346 Malicious code in soali (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6c73ab625e57bbab36d706b35ebf4f344a01e77b5f6f53b71765e029a845ee12 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...
MAL-2024-12262 Malicious code in ebe (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7f86097ff84bdd8007ecb73c8e4a3d412500e503469684998f78fd39b14e51d5 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...
Malicious code in ebell (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e8e763e9a652876b90896b11102319e43569b39d2be23d4170446ded6a619b1f --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...
Malicious code in soal (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 acbef83f8fce2a2944f16812b0a2f89f92b4b0e0902439a4224b7ddd2b516f9b --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...
MAL-2024-12263 Malicious code in ebell (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e8e763e9a652876b90896b11102319e43569b39d2be23d4170446ded6a619b1f --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...
CISA Warns of Actively Exploited RCE Flaw in GeoServer GeoTools Software
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical security flaw impacting OSGeo GeoServer GeoTools to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. GeoServer is an open-source software server written in Java that...
Dormakaba Locks Used in Millions of Hotel Rooms Could Be Cracked in Seconds
Security vulnerabilities discovered in Dormakaba's Saflok electronic RFID locks used in hotels could be weaponized by threat actors to forge keycards and stealthily slip into locked rooms. The shortcomings have been collectively named Unsaflok by researchers Lennert Wouters, Ian Carroll, rqu,...
The 3 most common post-compromise tactics on network infrastructure
Weve been discussing networking devices quite a lot recently and how Advanced Persistent Threat actors APTs are using highly sophisticated tactics to target aging infrastructure for espionage purposes. Some of these attacks are also likely prepositioning the APTs for future disruptive or...
Beware: Fake Facebook Job Ads Spreading 'Ov3r_Stealer' to Steal Crypto and Credentials
Threat actors are leveraging bogus Facebook job advertisements as a lure to trick prospective targets into installing a new Windows-based stealer malware codenamed Ov3rStealer. "This malware is designed to steal credentials and crypto wallets and send those to a Telegram channel that the threat...
Italian Businesses Hit by Weaponized USBs Spreading Cryptojacking Malware
A financially motivated threat actor known as UNC4990 is leveraging weaponized USB devices as an initial infection vector to target organizations in Italy. Google-owned Mandiant said the attacks single out multiple industries, including health, transportation, construction, and logistics. "UNC499...
GoTitan Botnet Spotted Exploiting Recent Apache ActiveMQ Vulnerability
The recently disclosed critical security flaw impacting Apache ActiveMQ is being actively exploited by threat actors to distribute a new Go-based botnet called GoTitan as well as a .NET program known as PrCtrl Rat that's capable of remotely commandeering the infected hosts. The attacks involve th...