Exploit Archives - Page 12 of 15

Google releases 165 YARA rules to detect Cobalt Strike attacks

11/23/2022
Cyber News
Exploit, Hacking, PrivEsc, RCE, Security

The Google Cloud Threat Intelligence team has open-sourced YARA Rules and a VirusTotal Collection of indicators of compromise (IOCs) to help defenders detect Cobalt Strike components in their networks

23 November

LodaRAT Malware Resurfaces with New Variants Employing Updated Functionalities

The LodaRAT malware has resurfaced with new variants that are being deployed in conjunction with other sophisticated malware, such as RedLine Stealer and Neshta

19 November

Google Search results poisoned with torrent sites via Data Studio

11/18/2022
Cyber News
Exploit, Hacking, Malware, Phishing, PrivEsc

Threat actors are abusing Google's Looker Studio (formerly Google Data Studio) to boost search engine rankings for their illicit websites that promote spam, torrents, and pirated content

18 November

Atlassian fixes critical command injection bug in Bitbucket Server

11/18/2022
Cyber News
0day, Exploit, Hacking, Hardening, Patching

Both security vulnerabilities received a severity rating of 9 out of 10 (calculated by Atlassian) and affect multiple versions of the products

18 November

Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images

The purpose of the PNG files is to conceal a payload that's used to facilitate information theft

16 November

Cookies for MFA Bypass Gain Traction Among Cyberattackers

11/12/2022
Cyber News
Exploit, Hacking, Hardening, Malware, PrivEsc

Stealing session cookies has become one of the most common ways that attackers circumvent multifactor authentication

12 November

Microsoft fixes Windows zero-day bug exploited to push malware

11/11/2022
Cyber News
Exploit, Hacking, Malware, Patching, RCE

Windows has fixed a bug that prevented Mark of the Web flags from propagating to files within downloaded ISO files

11 November

Citrix urges admins to patch critical ADC, Gateway auth bypass

11/08/2022
Cyber News
0day, Exploit, Hacking, Patching, PrivEsc

Citrix is urging customers to install security updates for a critical authentication bypass vulnerability in Citrix ADC and Citrix Gateway.

8 November

Fortinet Patches 6 High-Severity Vulnerabilities

Fortinet on Tuesday informed customers about 16 vulnerabilities discovered in the company's products, including six flaws that have been assigned a "high" severity rating

2 November