The threat actors behind the nascent Buhti ransomware have eschewed their custom payload in favor of leaked LockBit and Babuk ransomware families to strike Windows and Linux systems.
“While the group doesn’t develop its own ransomware, it does utilize …
A stealthy China-based group managed to establish a persistent foothold into critical infrastructure organizations in the U.S. and Guam without being detected, Microsoft and the “Five Eyes” nations said on Wednesday.
The tech giant’s threat intelligenc…
The Iranian threat actor known as Agrius is leveraging a new ransomware strain called Moneybird in its attacks targeting Israeli organizations.
Agrius, also known as Pink Sandstorm (formerly Americium), has a track record of staging destructive data-wi…
Google on Wednesday announced the 0.1 Beta version of GUAC (short for Graph for Understanding Artifact Composition) for organizations to secure their software supply chains.
To that end, the search giant is making available the open source framework as…
WBCE CMS 1.6.1 – Multiple Stored Cross-Site Scripting (XSS)
Ulicms 2023.1 – create admin user via mass assignment
Filmora 12 version ( Build 1.0.0.7) – Unquoted Service Paths Privilege Escalation
Seagate Central Storage 2015.0916 – Unauthenticated Remote Command Execution (Metasploit)
SCM Manager 1.60 – Cross-Site Scripting Stored (Authenticated)
