WarmCookie Malware Dissection
WarmCookie, also known as BadSpace, is a new malware family that has been actively distributed through malspam and malvertising campaigns since April 2024. Uppn compromise, the malware will have persistent…
PoC Exploit released for Microsoft flaw CVE-2024-43532
Researcher from Akamai has released a proof-of-concept (PoC) exploit code for a critical Elevation of Privilege vulnerability, that’s tracked as CVE-2024-43532 with a CVSS score of 8.8. This vulnerability exploits…
Fortinet keeps quiet about a critical vulnerability
Fortinet seems to keep a critical vulnerability under wraps for more than a week, amid reports that attackers are using it to execute malicious code on servers used by sensitive…
CISA adds SharePoint vulnerability to its KEV Catalog
The US CISA has added Microsoft SharePoint vulnerability to its Known Exploited Vulnerability Catalog based on the evidence of active exploitation CVE-2024-38094 With a CVSS score of 7.2, Microsoft SharePoint…
Sophos set to acquire Secureworks
Sophos is set to acquire Secureworks for a deal worth $859 million. The acquisition comes five years after Sophos was itself bought by Thoma Bravo for $3.9 billion. Sophos are…
CISA adds ScienceLogic flaw CVE-2024-9537 to its KEV Catalog
The US CISA has added ScienceLogic vulnerability to its Known Exploited Vulnerability Catalog based on the evidence or active exploitation The vulnerability tracked as CVE-2024-9537 with a CVSSscore of 9.8,…
Oracle fixes CVE-2024-21216 in Weblogic Server
Oracle has released patches as part of its October 2024 Critical Patch Update (CPU), addressing 329 vulnerabilities across a variety of products. Among these are five severe vulnerabilities within the…
BIG-IP F5 affected by a vulnerability CVE-2024-45844
A critical vulnerability has been identified in F5 BIG-IP that could allow authenticated attackers to bypass access control restrictions and potentially compromise the system. The vulnerability tracked as CVE-2024-45844 with…