Karakurt Cyber Gang
Researchers detailed the activity of a sophisticated financially motivated threat actor called Karakurt. The activity of the group was first spotted in June 2021, but the group has been more…
WD SAN Disk Secure Access Flaw Vulnerable to Password Attacks
Western Digital has released updates for its SanDisk SecureAccess software to fix multiple vulnerabilities that can be exploited to access user data by carrying out brute force and dictionary attacks.…
Kaseya Backup Appliance Critical Flaws !
Developers have resolved a series of vulnerabilities in storage technologies from Kaseya, including two critical flaws that each posed a remote code execution risk. Two unauthenticated SQL injection vulnerabilities in…
Cox Data Breach ! Customer Support Impersonated
Cox Communications has disclosed a data breach after a hacker was able to gain access to the personal information of its customers by impersonating a support agent. The company's customers…
Log4J ZeroDay BailOut ! With Limitations
A bailout against the Log4Shell vulnerability appears to offer a way to reduce risk from the widespread flaw affecting servers that run Apache Log4j. The script was developed by researchers…
Microsoft Outlook Exploit Could Masquerade
Malicious actors are using social engineering tactics to exploit Microsoft Outlook’s vulnerability and send emails to users, making impersonators seem credible. In one attack, a test spoof email bypassed Outlook’s…