FIN7 Drops Payloads
A recent spear-phishing attacks conducted by financially motivated threat actor FIN7 using weaponized Windows 11 Alpha-themed Word documents with Visual Basic macros to drop malicious payloads, including a JavaScript backdoor.…
Redux Bug affects WordPress
The Gutenberg Template Library & Redux Framework plugin for WordPress, which is deployed on over 1 million websites, is a collection of blocks that allow publishers to quickly create websites…
CLFS Evades Malware
A new malware family that they have detected evading security system. This malware depends on the Common Log File System (CLFS) to cover a second-stage payload in registry transaction files…
DDoS hits Vocus ! 🇦🇺
Internet infrastructure provider Vocus has confirmed it was hit with a DDoS attack which took its internet down. Afer a widespread outage affecting a number of companies including Spark, Vodafone,…
CISCO Fixes Critical Bug
A critical vulnerability (CVE-2021-34746) that affects Cisco Enterprise NFV Infrastructure Software has been patched and Cisco is urging enterprise admins to quickly upgrade to a fixed version. The bug could…
Autodesk – Cyber espionage Victim
Autodesk, an American software and security company, said in a recent filing to the U.S. Securities and Exchange Commission that hackers had targeted the firm with the Sunburst malicious software.…
Lightning Cable Steals Data
USB-to-Lightning cable, once plugged into machine,helps hackers steal all of the data from your iPhone and inject malware onto your device. It's comes out as a surprise Motherboard came up about a…
Atlassian Confluence Exploit
Threat actors were spotted exploiting the CVE-2021-26084 vulnerability in Atlassian’s Confluence enterprise collaboration product. Atlassian released security patches to address the critical flaw earlier last week. The flaw is an OGNL injection issue that…