Author: Admin
The government and the telecommunications sectors in Southeast Asia were the goal of a “complex” company that is carried out by a new advanced sustainable threat (APT) called Land kurma Since June 2024. The attacks, for the micro trend, use custom malware, cortical and cloud data storage services for data expressing. Philippines, Vietnam, Thailand and Malaysia are some of the famous goals. “This company presents high business riches due to focused espionage, accounts, permanent fixing, installed through rootkits at the kernel level, and data exchanage through trusted cloud platform – Note in an analysis published last week. The actor threatens…
April 28, 2025Red LakshmananSea -safety / malicious software Cybersecurity researchers warn of a large -scale phishing campaign aimed at WooCommerce users with a fake security warning calling them to load a “critical patch” but instead deploy the back. WordPress Patchstack’s security company called the activity as a complex and variant of another company observe In December 2023, this used fake Cve Ploy to violate sites that control the popular content management system (CMS). Given the similarity of e -mail phishing baits, fake web pages and the same methods used to hide malware, it is believed that the last wave of…
April 28, 2025Red LakshmananSecurity / vulnerability web -applications The threatening actors were observed the use of two recently disclosed critical security deficiencies in craft CMS attacks with zero day to violate servers and receiving unauthorized access. Attacks, first, observe According to the Orange Cyberdefense Sensepost on February 14, 2025 provides the device below the vulnerabilities – Cve-2024-58136 (CVSS assessment: 9.0) – Incorrect defense of the alternative shortage of the way in This is the PHP frame Used Craft CMS, which can be used to access limited functionality or resources (regression Cve-2024-4990) Cve-2025-32432 (CVSS assessment: 10.0) – Vulnerability of the remote…
April 27, 2025Red LakshmananKubernetes / Cloud Security Microsoft revealed that the actor threats he tracks as the Storm-1977 Password attack attacks Against cloud tenants in the education sector over the last year. “The attack provides use of the AzurecheCker.exe command line tool used by a wide range of threat subjects,” Microsoft Intelligence team – Note In the analysis. The technical giant noted that he watched the binary connection to the external server called “Sac-Auth.nodeFunction (.) VIP to get the data registered AES containing a password spray target. The tool also accepts as an entry text file called “Uxitals.txt”, which includes…
April 26, 2025Red LakshmananMalicious software / vulnerability Cybersecurity researchers detail about the activity of an initial broker (IAB) called Toy that was observed Access transfer To double the extorting gangs like Cactus. IAB was evaluated with the average confidence to be a financially motivated actor threatened, scanning the vulnerable systems and deploying custom malware called Lagtoy (aka Cholarun). “Lagtoy can be used to create back shells and execution of teams at infected final points,” – Cisco Talos Joey, Asheer Malhotra, Ashley Shen, Vitar Ventu and Brandon White – Note. Malicious software was first recorded by Google Mandiant at the end…
North Korea related to the threat Increased interview created front companies as a way of spreading malware during a fake hiring process. “In this new company, the” threat “group uses three front companies in the consulting cryptocurrency industry – Blocknovas LLC (Blocknovas (Blocknovas ( – Note in a deep dive analysis. Activities, according to the cybersecurity company, is used to distribute three different well -known malware, Beavertail, Nivisibleferretand Cockie Cookie. A busy interview is one of several social engineering companies organized by North Korea, which is organized to download the interplatform malware under the pretext of coding or correcting the…
April 25, 2025Red LakshmananVulnerability / safety network Cybersecurity researchers warn of a new malicious software called Dslogdrat, which is installed after the exploitation of the already requested security lack of Ivanti Connect Secure (ICS). The malicious software, along with the web-line, were “established using the vulnerability of the zero day at the time, CVE-2025-0282, during the attacks on the organization in Japan approximately December 2024,” “JPECT/CC Yuma Masubuchi Researcher – Note In a report published on Thursday. Cve-2025-0282 Refers to a critical lack of security in the IS, which can allow unauthorized execution of the remote code. This was addressed…
When we are talking about cybersecurity identity, most people think about users, passwords and random mingle tips. But hiding under the surface is an increasing threat that does not provide for human powers, as we see the exponential growth of inhuman identity (NHIS). On top of the mind when mentioned by NHIS, most security teams immediately think Service accounts. But it goes far beyond this. You have Directors. Roles of snowflake. Already rolesand designs characteristic of the platform, with AWS, Azure, GCP and much more. However, NHIS can change as widely as the services and environments in your modern technological…
April 25, 2025Red LakshmananVulnerability / safety of businesses The actors are likely to use a new vulnerability in SAP Netweaver to download the JSPA web for promoting unauthorized file downloads and code execution. ‘Operation is probably associated with either previously disclosed vulnerability as Cve-2017-9844 Either an unregistered issue of inclusion in deleted files (RFI), “reliaquest – Note In a report published this week. Cybersecurity said the possibility of zero day is due to the fact that several affected systems had already been conducted. The deficiency is assessed by the introduction at the final point “/Metadatauploader” in the Netweaver environment, allowing…
April 25, 2025Red LakshmananVulnerability / data violation Cybersecurity researchers revealed three security deficiencies in Standpoint The Ruby web server interface, which, if successfully used, can allow the attackers to gain unauthorized access to files, enter harmful data and reinforce magazines under certain conditions. Vulnerability named According to the Cybersecurity supplier Opswat, below – Cve-2025-27610 (CVSS assessment: 7.5) – vulnerability of the path that can be used to access all files in the indicated Cve-2025-27111 (CVSS’s assessment: 6.9) – Incorrect Carbage Failure (CRLF) sequences and incorrect output neutralization for vulnerability of logs that can be used to manipulate log records and…