Vulnerability Management

Baltimore Public Schools Ransomware Attack: Technical Breakdown of Black Basta’s VMware ESXi Exploit

Data Breach

Baltimore Public Schools Ransomware Attack: Technical Breakdown of Black Basta’s VMware ESXi Exploit

In February 2024, Baltimore City Public Schools suffered a significant ransomware attack compromising over 25,000 records of...

SK Telecom USIM Data Breach: Technical Analysis and Mitigation Strategies

Data Breach

SK Telecom USIM Data Breach: Technical Analysis and Mitigation Strategies

South Korea’s largest telecom operator, SK Telecom, disclosed a malware attack on April 19, 2025, that compromised...

Windows 10 KB5055612 Preview Update Addresses WSL2 GPU Bug and Kernel Security

Blue-Team

Windows 10 KB5055612 Preview Update Addresses WSL2 GPU Bug and Kernel Security

Microsoft has released the optional KB5055612 preview cumulative update for Windows 10 22H2, addressing a critical GPU...

SK Telecom USIM Data Breach: Malware Attack Exposes Customer Authentication Data

Data Breach

SK Telecom USIM Data Breach: Malware Attack Exposes Customer Authentication Data

South Korea’s largest mobile operator, SK Telecom, has confirmed a malware attack compromising sensitive USIM-related customer data,...

Ripple’s xrpl.js Library Compromised in Supply Chain Attack: Technical Analysis

News

Ripple’s xrpl.js Library Compromised in Supply Chain Attack: Technical Analysis

A critical supply chain attack has compromised Ripple’s official JavaScript library, xrpl.js, injecting malicious code to steal...

Apache Web Server SQL Injection Vulnerability (CVE-2025-23176): Technical Analysis and Mitigation

CVE News

Apache Web Server SQL Injection Vulnerability (CVE-2025-23176): Technical Analysis and Mitigation

A newly disclosed SQL injection vulnerability (CVE-2025-23176) in Apache Web Server has been rated with a CVSS...

Malicious npm and PyPI Packages Impersonate Developer Tools to Steal Credentials

Threat Intelligence

Malicious npm and PyPI Packages Impersonate Developer Tools to Steal Credentials

Recent findings by the Socket Threat Research Team reveal a growing trend of threat actors uploading malicious...

CISA Issues Five Critical ICS Advisories Covering Siemens, Schneider Electric, and ABB Systems

CVE News

CISA Issues Five Critical ICS Advisories Covering Siemens, Schneider Electric, and ABB Systems

The Cybersecurity and Infrastructure Security Agency (CISA) published five Industrial Control Systems (ICS) advisories on April 22,...

Critical Symantec pcAnywhere Remote Code Execution Vulnerability (CVE-2011-3478)

CVE News

Critical Symantec pcAnywhere Remote Code Execution Vulnerability (CVE-2011-3478)

A critical buffer overflow vulnerability in Symantec pcAnywhere, identified as CVE-2011-3478, allows unauthenticated attackers to execute arbitrary...

Rapid7’s Remediation Hub: A Shift from CVE-Centric to Risk-Based Vulnerability Management

Blue-Team

Rapid7’s Remediation Hub: A Shift from CVE-Centric to Risk-Based Vulnerability Management

Traditional vulnerability management often focuses on individual CVEs, leading to fragmented remediation efforts. Rapid7’s Remediation Hub introduces...

ManageWiki SQL Injection Vulnerability (CVE-2025-32956): Analysis and Mitigation

CVE News

ManageWiki SQL Injection Vulnerability (CVE-2025-32956): Analysis and Mitigation

A high-severity SQL injection vulnerability (CVE-2025-32956) has been identified in the ManageWiki MediaWiki extension, affecting versions prior...

Critical Buffer Overflow Vulnerability in H3C GR-3000AX Routers (CVE-2025-3854)

CVE News

Critical Buffer Overflow Vulnerability in H3C GR-3000AX Routers (CVE-2025-3854)

A critical buffer overflow vulnerability (CVE-2025-3854) has been identified in H3C GR-3000AX routers running firmware versions up...

Greenshift WordPress Plugin Vulnerability (CVE-2025-3616): Arbitrary File Upload Analysis

CVE News

Greenshift WordPress Plugin Vulnerability (CVE-2025-3616): Arbitrary File Upload Analysis

A critical vulnerability in the Greenshift WordPress plugin (CVE-2025-3616) allows authenticated attackers to upload arbitrary files, potentially...

Critical RCE Vulnerability in Yi IoT XY-3820 (CVE-2025-29659): Technical Analysis and Mitigation

CVE News

Critical RCE Vulnerability in Yi IoT XY-3820 (CVE-2025-29659): Technical Analysis and Mitigation

A critical remote code execution (RCE) vulnerability, designated as CVE-2025-29659, has been identified in the Yi IoT...

Microsoft Entra Token Logging Mishap Causes Widespread Account Lockouts: Technical Analysis

News

Microsoft Entra Token Logging Mishap Causes Widespread Account Lockouts: Technical Analysis

Microsoft has confirmed that a recent wave of Entra ID (formerly Azure AD) account lockouts stemmed from...

Google OAuth and DKIM Replay Attack: How Phishers Spoofed Google’s Email Systems

Threat Intelligence

Google OAuth and DKIM Replay Attack: How Phishers Spoofed Google’s Email Systems

In a sophisticated phishing campaign, attackers exploited Google’s OAuth infrastructure and DKIM email authentication to send fraudulent...

WordPress Ad Fraud Operation “Scallywag” Generated 1.4 Billion Fake Ad Requests Daily

Threat Intelligence

WordPress Ad Fraud Operation “Scallywag” Generated 1.4 Billion Fake Ad Requests Daily

A large-scale ad fraud operation, dubbed “Scallywag,” has been exploiting compromised WordPress plugins to generate 1.4 billion...

Think Router Tk-Rt-Wr135G Authentication Bypass Vulnerability (CVE-2024-55211) Analysis

CVE News

Think Router Tk-Rt-Wr135G Authentication Bypass Vulnerability (CVE-2024-55211) Analysis

A critical authentication bypass vulnerability (CVE-2024-55211) has been identified in Think Router’s Tk-Rt-Wr135G wireless router, posing significant...

Critical SQL Injection Vulnerability in Dietiqa App (CVE-2025-28009): Technical Analysis and Mitigation

CVE News

Critical SQL Injection Vulnerability in Dietiqa App (CVE-2025-28009): Technical Analysis and Mitigation

A critical SQL injection vulnerability (CVE-2025-28009) has been identified in Dietiqa App version 1.0.20, posing significant risks...

Critical SQL Injection Vulnerability in Pantherius Modal Survey Plugin (CVE-2025-39471)

CVE News

Critical SQL Injection Vulnerability in Pantherius Modal Survey Plugin (CVE-2025-39471)

A critical SQL injection vulnerability (CVE-2025-39471) has been identified in the Pantherius Modal Survey plugin for WordPress,...

Posts pagination

Previous 1 … 8 9 10 11 12 13 14 … 16 Next

Vulnerability Management

Baltimore Public Schools Ransomware Attack: Technical Breakdown of Black Basta’s VMware ESXi Exploit

SK Telecom USIM Data Breach: Technical Analysis and Mitigation Strategies

Windows 10 KB5055612 Preview Update Addresses WSL2 GPU Bug and Kernel Security

SK Telecom USIM Data Breach: Malware Attack Exposes Customer Authentication Data

Ripple’s xrpl.js Library Compromised in Supply Chain Attack: Technical Analysis

Apache Web Server SQL Injection Vulnerability (CVE-2025-23176): Technical Analysis and Mitigation

Malicious npm and PyPI Packages Impersonate Developer Tools to Steal Credentials

CISA Issues Five Critical ICS Advisories Covering Siemens, Schneider Electric, and ABB Systems

Critical Symantec pcAnywhere Remote Code Execution Vulnerability (CVE-2011-3478)

Rapid7’s Remediation Hub: A Shift from CVE-Centric to Risk-Based Vulnerability Management

ManageWiki SQL Injection Vulnerability (CVE-2025-32956): Analysis and Mitigation

Critical Buffer Overflow Vulnerability in H3C GR-3000AX Routers (CVE-2025-3854)

Greenshift WordPress Plugin Vulnerability (CVE-2025-3616): Arbitrary File Upload Analysis

Critical RCE Vulnerability in Yi IoT XY-3820 (CVE-2025-29659): Technical Analysis and Mitigation

Microsoft Entra Token Logging Mishap Causes Widespread Account Lockouts: Technical Analysis

Google OAuth and DKIM Replay Attack: How Phishers Spoofed Google’s Email Systems

WordPress Ad Fraud Operation “Scallywag” Generated 1.4 Billion Fake Ad Requests Daily

Think Router Tk-Rt-Wr135G Authentication Bypass Vulnerability (CVE-2024-55211) Analysis

Critical SQL Injection Vulnerability in Dietiqa App (CVE-2025-28009): Technical Analysis and Mitigation

Critical SQL Injection Vulnerability in Pantherius Modal Survey Plugin (CVE-2025-39471)

You may have missed

Adobe Analytics Data Leak: Architectural Failure Exposes Cross-Tenant Data

Snapchat’s Shift to Paid Storage: A Technical Analysis of Cloud Service Monetization

Google’s Developer Registration Policy Threatens F-Droid’s Existence

Google Drive for Desktop Deploys AI-Powered Ransomware Detection and Recovery