Exploits – TheCyberThrone

Pwn2Own Vancouver 2024 Event Summary

Trend Micro’s Zero Day Initiative announced that participants earned $1,132,500 on the Pwn2Own Vancouver 2024 hacking competition for demonstrating 29 unique zero-days by exploiting against a Tesla car, Linux and…

PravinKarthik March 23, 2024

Docker Containers Blind Spots

Researchers have revealed numerous critical and high severity vulnerabilities with exploits available publicly hidden in hundreds of popular container images, Some vulnerabilities are part of the CISA KEV catalog, including…

PravinKarthik February 23, 2023

API Vulnerabilities causing Vehicles at Risk

Vehicles from multiple manufacturers could be abused to unlock, start, and track cars, plus impact the privacy of car owners with multiple bugs Flaws were found in the automotive APIs…

PravinKarthik January 9, 2023

Linux Trojan Exploiting WordPress Sites and plugins

Researchers have identified a new trojanized backdoor program that exploits multiple vulnerabilities in WordPress plug-ins and themes to breach websites based on the WordPress content management system. The flaws are…

PravinKarthik January 4, 2023

Zero Day Vulnerabilities in Year 2022 – A Review

This year 2022, a total of 50+ security vulnerabilities have been exploited as unpatched zero-days in the wild, according to an stats. It affected a wide range of platforms, including…

PravinKarthik December 23, 2022

Vulnerabilities Used by Chinese Threat Actors – Advisory Report

A new joint advisory from US CISA, FBI, and NSA states Chinese state–sponsored threat actors continue to exploit known vulnerabilities to target US and allied networks and companies, They use…

PravinKarthik October 9, 2022

Unit 42 assess on Hackers Sweet Spots

Attackers while looks into few of the luring application vulnerability targets, they wont wait long to exploit the environment. Researchers from Unit 42 analyzed and released Incident Response Report. Six…

PravinKarthik July 30, 2022

CISA – Known Exploited Catalog Update – May 2022

The CISA has added 41 flaws to its Known Exploited Vulnerabilities Catalog, including recently addressed issues in the Android kernel (CVE-2021-1048 and CVE-2021-0920) and Cisco IOS XR (CVE-2022-20821). The Cisco…

PravinKarthik May 25, 2022