August 2023 – TheCyberThrone

Akira Ransomware targets Cisco ASA Appliances via brute-force

Hackers have targeted Cisco Adaptive Security Appliance (ASA) SSL VPNs using a combination of brute-force attacks and credential stuffing. Since March 2023, affiliates of the Akira and LockBit ransomware operators…

PravinKarthik August 31, 2023

CVE-2023-4596 – WordPress Forminator Plugin Bug

A critical vulnerability has been found in Forminator that could allow unauthenticated attackers to upload arbitrary files to the affected site’s server. The vulnerability, tracked as CVE-2023-4596, with a CVSS…

PravinKarthik August 31, 2023

VMware Fixes Aria Bugs CVE-2023-34039 & CVE-2023-20890

VMware has released security patches to address two critical vulnerabilities in Aria Operations for Networks. The vulnerabilities could allow attackers to bypass authentication and gain remote code execution on unpatched…

PravinKarthik August 31, 2023

Malicious NPM Packages leveraged to steal Information

Researchers from Checkmarx detailed about a threat actor leveraging NPM packages to target developers to steal source code and secrets. Active since 2021, the threat actor has been publishing malicious…

PravinKarthik August 31, 2023

Earth Estries Cyberespionage campaign

Researchers have discovered that a threat actor is quietly stealing information across the globe from various organizations. The ongoing campaign was dubbed as Earth Estries that existed since at least…

PravinKarthik August 31, 2023

Operation Duck Hunt – Qakbot Infra Disrupted

A multinational action called Operation “Duck Hunt” — led by the FBI, the DoJ, the National Cybersecurity Alliance, Europol, and crime officials in France, Germany, the Netherlands, Romania, Latvia and…

PravinKarthik August 31, 2023

Barracuda ESG Vulnerability CVE-2023-2868 still remains a sweet plot

Mandiant researchers have warned that alleged Chinese attackers have and are continuing to target a zero-day vulnerability in Barracuda devices. The vulnerability in Barracuda’s Email Security Gateway – tracked as…

PravinKarthik August 30, 2023

Gartner Survey Report on CISO Thought Process

As per the new research report from Gartner, more than two-thirds of top-performing chief information security officers (CISOs) dedicate recurring time for professional development. The 69% figure compares with just…

PravinKarthik August 29, 2023