CISA Announces Scanner for Apache Log4j RCE Vulnerabilities
In an attempt to assist organizations, The Cybersecurity and Infrastructure Security Agency (CISA) has announced the release of a scanner for identifying web services...
How PYSA and Lockbit are Dominating the Ransomware Landscape
The cybercriminal landscape increases quickly with various kinds of ransomware variants and attacks. The NCC group’s report states, the number of ransomware attacks reported...
New Phishing Campaign Luring Users With Fake Surveys and Giveaways
Security experts from Group-IB disclosed a new global cyberespionage phishing campaign targeting users in over 90 countries, including the U.S., Canada, South Korea, and Italy. It...
Iranian Nation-State Adversaries Exploit Log4j Flaw Against Israeli Firms
Ever since the Apache Log4j flaw (CVE-2021-44228) was disclosed, cybercriminals looked for opportunities to exploit it and bypass security protections. Security experts from Check...
New Zero Day in ManageEngine Desktop Central Servers Identified
FBI issued an alert revealing that APT actors have been actively exploiting a zero-day vulnerability – CVE-2021-44515 – on ManageEngine Desktop Central servers.
The APT...
Microsoft Warns of Active Directory Vulnerabilities
Microsoft has urged organizations and users to immediately patch two Active Directory domain service privilege escalation security vulnerabilities. Tracked as CVE-2021-42287 and CVE-2021-42278, these vulnerabilities allow...
