Progress Telerik fixes CVE-2024-4358

Progress Telerik fixes CVE-2024-4358

A critical vulnerability has been discovered in Progress Telerik Report Server, a popular report management solution used by organizations worldwide. This vulnerability tracked as CVE-2024-4358, with a CVSS score of…
NGINX releases patches for several Vulnerabilities

NGINX releases patches for several Vulnerabilities

NGINX team has released patches for their popular web server software. These updates address four significant vulnerabilities related to the HTTP/3 implementation, specifically impacting configurations using the “ngx_http_v3_module”. CVE-2024-31079: A…
CISA KEV Catalog Update May 2024 – Part IV

CISA KEV Catalog Update May 2024 – Part IV

The U.S. CISA added the following vulnerabilities to its  Known Exploited Vulnerabilities catalog CVE-2024-24919 Check Point Quantum Security Gateways Information Disclosure Vulnerability CVE-2024-1086 Linux Kernel Use-After-Free Vulnerability The vulnerability CVE-2024-24919 is a Quantum Gateway information…
ShrinkLocker Ransomware Dissection

ShrinkLocker Ransomware Dissection

Researchers from Kaspersky have uncovered a new ransomware strain named ShrinkLocker, exploiting Microsoft’s built-in BitLocker encryption tool. The ransomware, which has already targeted industrial, pharmaceutical, and government organizations, utilizes a…
CatDDoS Exploitation Activity Surges

CatDDoS Exploitation Activity Surges

Researchers at XLab recently discovered that CatDDoS has been actively exploiting over 80 vulnerabilities and attacking more than 300 targets in last 3 months timeline. The use of Cacti-n0day and…