Ryuk Attack Anatomy

Ryuk Attack Anatomy

This report illustrates some of the new and existing Tactics, Techniques, and Procedures (TTPs) of the Ryuk ransomware variants Initial Access: RDP Brute Force / Phising Initial access is based…
Nagios cryptominers

Nagios cryptominers

Nagios XI is a popular enterprise server and network monitoring solutions. The feature “Configuration Wizard: Windows Management Instrumentation (WMI)” is being exploited in Nagios XI. Unit 42 researchers observed an…
Whatsapp Alert🦠

Whatsapp Alert🦠

CERT-IN has cautioned WhatsApp clients in India of various vulnerabilities it identified in the instant messaging platform, which could lead to a breach of sensitive client information and personal information.…
Exchange WebShell Scrutiny

Exchange WebShell Scrutiny

FBI has launched a mega operation to remove malicious web shells from hundreds of vulnerable computers in the US that were running on-premises versions of Microsoft Exchange Server software used…
DWM Zeroday

DWM Zeroday

The bug was accidentally found by the security researchers at Kaspersky in February of this year while they were studying another known flaw (CVE-2021-1732); this new problem was then referred…
NAME:WRECK

NAME:WRECK

Forescout revealed that four popular TCP/IP stacks specifically FreeBSD, Siemens’ Nucleus, IPnet and NetX are affected by a total of nine DNS-related flaws that can be exploited for remote code…