May 2023 – TheCyberThrone

WordPress critical Jetpack plugin Vulnerability

WordPress is automatically updating over five million installations of its Jetpack plugin after a critical vulnerability was discovered in it. Automattic, which also counts Jetpack as one of its subsidiaries,…

PravinKarthik May 31, 2023

Rezilion Smart Fix feature guides Patching Vulnerabilities

Rezilion has introduced a new feature called Smart Fix that offers critical guidance for users to understand the most strategic upgrade to fix vulnerable components. Updating vulnerable components to the…

PravinKarthik May 31, 2023

Mirai Bots Targeting IoT Devices

Researchers have found a new malicious activity targeting IoT devices, using a variant of Mirai bots, called IZ1H9 that can be used in large-scale network attacks. It was discovered in…

PravinKarthik May 30, 2023

Watering hole attack from Tortoiseshell group

Researchers have discovered a watering hole attack that targeted numerous Israeli websites. The attack is believed to be carried out by a nation-state actor from Iran linked with the Tortoiseshell group. Initially spotted…

PravinKarthik May 29, 2023

New TLD Based Phishing Campaign

A researcher gone by the name mr.d0x has discovered a new phishing technique that can leverage the file archiver in browser exploit to emulate an archiving software in the web…

PravinKarthik May 29, 2023

CrowdStrike strategy dominates MDR Market

Recent research on MDR providers by Forrester showcases that over the past two years, they turned their attention from maximizing their efficacy at detecting ransomware to finding faster and better…

PravinKarthik May 28, 2023

Zyxel Patches Critical Buffer Overflow Vulnerability

Zyxel has addressed two critical buffer overflow vulnerabilities, tracked as CVE-2023-33009 and CVE-2023-33010, that affect several of its firewall and VPN products. A remote, unauthenticated attacker can trigger the flaws…

PravinKarthik May 27, 2023