CVE-2024-56359, known as the Grist Core JavaScript URL Injection Vulnerability, poses a serious security threat since its discovery in December 2024. This vulnerability affects users who interact with Grist Core, a popular spreadsheet hosting server. When users visit malicious documents, an attacker can exploit this vulnerability by creating a HyperLink cell and injecting harmful JavaScript…
CVE-2024-56358, known as the Grist Core SVG Evaluation Vulnerability, is a significant security risk that emerged in December 2024. This flaw primarily affects users of the Grist Core spreadsheet hosting server. By visiting malicious documents or previewing dangerous attachments, users can inadvertently compromise their accounts. The vulnerability can lead to serious consequences, including unauthorized access…
A recent vulnerability identified as CVE-2024-37758 has surfaced in Digiteam Endpoint. This issue poses a serious risk to users worldwide, enabling unauthenticated privilege escalation. Essentially, this means someone without the right access can elevate their privileges on the target system, leading to unauthorized control over sensitive data. The vulnerability was reported during the week of…
A recent vulnerability in IBM Cognos Analytics, known as CVE-2024-40695, has raised alarms among cybersecurity professionals. Discovered on December 20, 2024, this vulnerability enables malicious actors to execute code remotely by uploading harmful files. Specifically, a privileged user can exploit this flaw to upload malicious executable files, compromising the security of the entire system. As…
Pojavil se je nov virus, poimenovan Wish Stealer, ki cilja na občutljive podatke, shranjene v brskalnikih na osnovi Chromiuma. Ta virus predstavlja resno grožnjo za kiber varnost, saj se hitro širi med uporabniki in izkorišča ranljivosti, ki jih brskalniki pogosto puščajo odprte. Ta zlonamerna programska oprema, zasnovana s pomočjo Node.js, je posebej ustvarjena za pridobivanje…
## Novi Ransomware Thanos Raziskovalci so nedavno identificirali novo varianto ransomwarea Thanos, ki cilja na policijsko upravo v Združenih arabskih emiratih. Ta napredni sistem Ransomware as a Service (RaaS) je znan po kraji podatkov, širjenju po omrežju in naprednih taktiki izmikanja. Primer napada Thanos pokazuje, kako lahko ransomware resno ogrozi varnost sistemov. ### Kaj je…
## Proxy Botneti in Kibernetske Grožnje Proxy botneti, ki jih vzpostavijo tako državni kot nedržavni akterji, igrajo ključno vlogo v svetu zlonamernih dejavnosti. Takšni botneti zagotavljajo anonimnost in omogočajo izvajanje različnih kibernetskih napadov. Med najbolj znanimi botneti so **VPNFilter**, **Cyclops Blink** in **Water Barghest**. Ta članek se osredotoča na delovanje in vpliv **Water Barghest** botneta,…
Na platformi SHJCoop, priznani kooperativni platformi s sedežem v ZAE, je prišlo do varnostnega incidenta, ki je razkril občutljive informacije uporabnikov. Ta vdor je sprožil zaskrbljenost glede kibernetske varnosti na platformah e-trgovine in je razkril resna tveganja, s katerimi se zdaj soočajo uporabniki. Porocila nakazujejo, da je bila kompromitirana baza podatkov naložena na temni splet,…
Koda omrežnega sistema Quad Miners’ Network Blackbox, ključne sestavine infrastrukture za rudarjenje kriptovalut, naj bi bila domnevno naprodaj na hekerskih forumih. Ta situacija sproža resne pomisleke glede kibernetske varnosti v industriji rudarjenja kriptovalut, saj bi lahko delila notranje informacije in ranljivosti sistema. Po tvitu uporabnika DarkWebInformer naj bi grožnja in dejanski izvajalec posedovala in prodajala…
Understanding the Huawei Terminal Printer Command Injection Vulnerability The cybersecurity landscape is constantly evolving, and vulnerabilities can have serious implications. One significant vulnerability to note is the Huawei Terminal Printer Command Injection Vulnerability, identified by CVE-2022-32203. Discovered in 2022, this vulnerability allows attackers to inject malicious commands into Huawei terminal printers. This opens the door…