Log4j ! ZeroDay Exploit
Researchers discovered a vulnerability affecting Java versions of Minecraft that allows criminals to run malicious code on servers and end-user devices running the hugely popular game, several websites. The underlying…
Apache SSRF bug Exploited
Threat actors are exploiting a recently addressed server-side request forgery (SSRF) vulnerability, tracked as CVE-2021-40438, in Apache HTTP servers. This flaw can be exploited against httpd web servers that have…
Posted inSecurity
MSHTML Bug Exploited to Steal Credentials
Iranian threat actor is stealing Google and Instagram credentials using a new PowerShell based theft tool which is also used to monitor Telegram and collect system information from the compromised…
Vulnerabilities found in Lantronix ! Critical
Critical Vulnerabilities have been identified in Lantronix Wi-Fi module designed for critical industrial and commercial applications. The affected product, the PremierWave 2050 enterprise Wi-Fi module, delivers always-on 5G Wi-Fi connectivity,…
Zero Day in FatPipe VPN Services
The US FBI said it discovered an APT abusing a zero-day vulnerability in FatPipe networking devices as a way to breach companies and gain access to their internal networks. The…
NetGear… Geared up with Vulnerabilities
Netgear has released round of patches to remediate a high security remote code execution vulnerability affecting multiple routers that could be exploited by remote attackers to take control of an affected system. Tracked as CVE-2021-34991 (CVSS…
New Windows Privilege Escalation Zero Day Haunts
A new Windows zero-day elevation of privilege vulnerability emerged with a public proof of concept (PoC) exploit that grants SYSTEM privileges under certain conditions. The only safe point as of…
BillQuick ZeroDay Deploys Ransomware
At least one hacking group is exploiting a security flaw in a popular billing software suite to gain initial access, take over servers, and then deploy ransomware inside companies’ networks.…