CISA KEV Update – May 2024
CISA is seen as active this week, and it has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2014-100005 D-Link DIR-600 Router…
Google fixes 2nd Zeroday in a Week – CVE-2024-4947
Google has released an emergency security update for a zeroday vulnerability in Chrome browser that is being actively exploited by attackers in the wild. The vulnerability, tracked as CVE-2024-4947, is…
US Authorities took control of BreachForums
The U.S. FBI and Department of Justice have seized control of the infamous BreachForums hacking forum, according to a notice on the group’s site. The notice on the BreachForums site…
Microsoft Zeroday Bug CVE-2024-30051 exploited to install QakBot
Microsoft has addressed a critical zero-day vulnerability during this moth patch Tuesday release. The vulnerability tracked as CVE-2024-30051 with a CVS score of 7.8, that was actively exploited by attackers…
Microsoft Patch Tuesday – May 2024
Microsoft addresses 59 CVEs in its May 2024 Patch Tuesday release with one critical vulnerability and three zero-day vulnerabilities, two of which were exploited in the wild. Windows DWM Core…
VMware fixes vulnerabilities exploited in Pwn2Own Vancouver
VMware has released patches for Workstation and Fusion products towards the vulnerabilities exploited earlier this year at the Pwn2Own hacking competition. Three of the vulnerabilities were reported at the Pwn2Own…
SAP Address Several Vulnerabilities with May 2024 Patch Day
SAP has released patches for 14 new security notes and three updates to previously released notes as part of its May 2024 Security Patch Day. The most significant advisory addresses…
Mallox Ransomware deployed exploiting SQL Honeypots
Researchers have identified that Mallox ransomware has been deployed using MS-SQL honeypot with sophisticated tactics employed by cyber-attackers. The honeypot was targeted by an intrusion set utilizing brute-force techniques to…