Hackers are Actively Using Windows Regsvr32 for Evading Detection
Researchers at Uptycs have reported on the sharp rise of incidents where cybercriminals are using Windows Regsvr32 in their course of attacks.
Hackers are seen...
WordPress PHP Everywhere Plugin Puts Thousands of Sites at Risk
Researchers at Wordfence have found critical vulnerabilities in a popular WordPress plugin called PHP Everywhere, affecting thousands of websites.
The remote code execution bug in...
Puma Data Breach: Senstive Data of Employees Stolen
The ransomware attack against Kronos systems last year is now affecting one of its biggest clients - Puma, through a data breach.
As per a...
FBI Shared Technical Details of LockBit Ransomware
FBI has shared critical detection and defense tips against the LockBit ransomware, which has grown to be one of the infamous actors in the...
Security Vulnerabilities in UEFI Firmware Affects Popular Vendors
Binarly researchers have found nearly two dozen vulnerabilities in InsydeH2O UEFI firmware, which affects over 25 vendors worldwide.
Some of the vulnerabilities are given a...
Microsoft Patched a Windows 10 Privilege Escalation Bug
A security researcher has publicly shared an exploit of Windows 10, which lets any threat actor with limited privileges to a vulnerable system gain...
LockBit Ransomware Adds Support For Encrypting Linux VMware Servers
Trend Micro researchers have detailed new support gained by the LockBit ransomware group - Encryption of Linux virtual machines.
As per them, LockBit's new Linux...
PowerPoint Based Information Stealing Email Campaign in Wild
Researchers from Netskope’s Threat Labs have documented a PowerPoint-based information-stealing campaign, that's been in wild since late last year.
Threat actors here are seen dropping...
FBI Warns of a New QR Code Scam Aimed at Stealing Money
The Federal Bureau of Investigation (FBI) has issued a public announcement regarding the fake QR code scams happening in wild, aimed at stealing senstive...
CISA Listed 17 New Actively Exploited Vulnerabilities, Advises to Patch
The US Cybersecurity and Infrastructure Security Agency (CISA) has added 17 new vulnerabilities to its list of "Known Exploited Vulnerabilities Catalog."
These vulnerabilities are actively...