Tunnel Crack Attack affecting VPN’s
TunnelCrack is a combination of two widespread security vulnerabilities in VPNs. An adversary can abuse these vulnerabilities to leak traffic outside the VPN tunnel. A team of academics – Nian…
Microsoft Chromium Edge VPN in Preview Mode
Microsoft will be retiring IE on June 15. The company has shifted its focus to maintaining and developing the Chromium-based Edge browser. Microsoft rolls out new Edge features fairly often, though some of them…
Karakurt Cyber Gang
Researchers detailed the activity of a sophisticated financially motivated threat actor called Karakurt. The activity of the group was first spotted in June 2021, but the group has been more…
Posted inSecurity
Zero Day in FatPipe VPN Services
The US FBI said it discovered an APT abusing a zero-day vulnerability in FatPipe networking devices as a way to breach companies and gain access to their internal networks. The…
Hardening Standards for VPN
CISA and the NSA have released guidance for increasing the security VPN solutions. Multiple attacks against private organizations and government entities, were carried out by threat actors by exploiting vulnerabilities…
Forti VPN 500,000 Passwords leaked
A hacker gang has allegedly collected and dumped 500,000 login credentials belonging to users of a popular VPN product from cybersecurity firm Fortinet. The threat actor, dubbed Orange, leaked the…
Posted inCyberAttack cybersecurity Exfilteration
North Korea Exploits South Korea
South Korea's state-run Korea Atomic Energy Research Institute (KAERI) disclosed that its internal network was infiltrated by suspected attackers operating out of its northern counterpart. The intrusion is said to…
Iran Threat Actors Exploit ..Monitor..
Researchers recently pieced together the activity, showing the limits of the cyber industry’s knowledge of Tehran-linked hacking against those who often bear the brunt of it: Iranian citizens. The findings…