Blog Full Left Sidebar

When is One Vulnerability Scanner Not Enough?

Like antivirus software, vulnerability scans rely on a database of known weaknesses. That’s why websites like VirusTotal exist, to give cyber practitioners a chance to see whether a malware sample is detected by multiple virus scanning engines, but this concept hasn’t existed in the vulnerability management space. The...

•May 2, 2024•No comments

Dropbox Discloses Breach of Digital Signature Service Affecting All Users

Cloud storage services provider Dropbox on Wednesday disclosed that Dropbox Sign (formerly HelloSign) was breached by unidentified threat actors, who accessed emails, usernames, and general account settings associated with all users of the digital signature product. The company, in a filing with the U.S. Securities and Exchange Commission (SEC),...

•May 2, 2024•No comments

New “Goldoon” Botnet Targets D-Link Routers With Decade-Old Flaw

A never-before-seen botnet called Goldoon has been observed targeting D-Link routers with a nearly decade-old critical security flaw with the goal of using the compromised devices for further attacks. The vulnerability in question is CVE-2015-2051 (CVSS score: 9.8), which affects D-Link DIR-645 routers and allows remote attackers to execute arbitrary

•May 2, 2024•No comments

CISA Warns of Active Exploitation of Severe GitLab Password Reset Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw impacting GitLab to its Known Exploited Vulnerabilities (KEV) catalog, owing to active exploitation in the wild. Tracked as CVE-2023-7028 (CVSS score: 10.0), the maximum severity vulnerability could facilitate account takeover by sending password reset emails to...

•May 2, 2024•No comments

New Cuttlefish Malware Hijacks Router Connections, Sniffs for Cloud Credentials

A new malware called Cuttlefish is targeting small office and home office (SOHO) routers with the goal of stealthily monitoring all traffic through the devices and gather authentication data from HTTP GET and POST requests. “This malware is modular, designed primarily to steal authentication material found in web requests that transit...

•May 2, 2024•No comments

1 … 537 538 539 540 541 … 616

When is One Vulnerability Scanner Not Enough?

Dropbox Discloses Breach of Digital Signature Service Affecting All Users

New “Goldoon” Botnet Targets D-Link Routers With Decade-Old Flaw

CISA Warns of Active Exploitation of Severe GitLab Password Reset Vulnerability

New Cuttlefish Malware Hijacks Router Connections, Sniffs for Cloud Credentials

Recent Articles

Text Widget

Practice Areas

When is One Vulnerability Scanner Not Enough?

Dropbox Discloses Breach of Digital Signature Service Affecting All Users

New “Goldoon” Botnet Targets D-Link Routers With Decade-Old Flaw

CISA Warns of Active Exploitation of Severe GitLab Password Reset Vulnerability

New Cuttlefish Malware Hijacks Router Connections, Sniffs for Cloud Credentials

Recent Articles

Tag Cloud

Text Widget

Practice Areas