**Raziskovanje RedLine Stealer: Analiza Malwara in Njegovih Funkcionalnosti** Raziskovalci so v sodelovanju s pravosodnimi organi analizirali prej nedokumentirane module platforme za malware-as-a-service, znane kot RedLine Stealer. Ta malware prevzema nadzor…
Two Critical Security Flaws Impacting WordPress Plugins Two serious security vulnerabilities have been identified in the Spam protection, Anti-Spam, and FireWall plugin for WordPress. These flaws could allow an unauthenticated…
Understanding Vulnerability Management with Intruder’s Intel When CVEs (Common Vulnerabilities and Exposures) go viral, it becomes crucial for organizations to differentiate critical vulnerabilities from the noise. Protecting your organization requires…
Earth Estries and the GHOSTSPIDER Backdoor Threat The threat actor known as Earth Estries, linked to China, has recently been seen using a new and previously undocumented backdoor called GHOSTSPIDER….
RomCom Threat Actor Exploits Zero-Day Flaws in Firefox and Windows The Russia-aligned threat actor known as RomCom has recently exploited two significant security flaws: one in Mozilla Firefox and another…
Critical Security Flaw in Array Networks AG and vxAG Secure Access Gateways On Monday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) updated its Known Exploited Vulnerabilities (KEV) catalog to…
## Hčerinsko podjetje Zappian Media LLC utrpelo velik vdor v varnost podatkov Oktobra 2024 je prišlo do resnega vdor v hčerinsko podjetje Zappian Media LLC, ki je naravnost pretresel celotno…
PyPI Quarantines "aiocpa": A Cautionary Tale for Developers The Python Package Index (PyPI) has recently taken action against the package "aiocpa." This quarantine follows a troubling update that introduced malicious…
Google Introduces Restore Credentials for Easy Account Migration Google has unveiled a new feature called Restore Credentials. This tool helps users restore their account access to third-party apps securely when…
New Attack Techniques Targeting Infrastructure-as-Code and Policy-as-Code Tools Cybersecurity researchers have uncovered two significant attack techniques targeting infrastructure-as-code (IaC) and policy-as-code (PaC) tools like HashiCorp's Terraform and Open Policy Agent…