HMRC Spear Phishing Emails
Phishing emails appearing to be from HM Revenue & Customs (HMRC) are known to increase in volume from January to
Read MoreAuthor: Duncan
Cryptocurrency Miner Distributed via Weathermap Plugin
A cryptocurrency miner has been distributed via a PHP tool exploiting a vulnerability in the Weathermap network monitoring tool, targeting
Read MoreSamba Settings SNAFU Lets Any User Change Admin Passwords
A vulnerability has been discovered in the Samba 4 Active Directory domain controller (AD DC) which allows authenticated users to
Read MoreMikroTik RouterOS SMB Vulnerability [CVE-2018-7445]
A vulnerability in MikroTik’s RouterOS software Server Message Block (SMB) service may allow a remote, unauthenticated attacker to execute arbitrary
Read More
Qrypter MaaS [Malware-as-a-Service] Remote Access Trojan
A new Java-based remote access trojan (RAT), known as Qrypter, has been observed. Developed by the ‘QUA R&D’ criminal group,
Read MoreRoyalCLI and RoyalDNS Backdoors
The Chinese Advanced Persistent Threat group APT15 has been found responsible for compromising a UK government contractor using two new
Read MoreCisco IOS and IOS XE Software EnergyWise Denial of Service Vulnerabilities
CVE Numbers :- CVE-2017-3860 CVE-2017-3861 CVE-2017-3862 CVE-2017-3863 Multiple vulnerabilities in the EnergyWise module of Cisco IOS and Cisco IOS XE Software could
Read MoreFasterXML jackson-databind ObjectMapper readValue Method Blacklist Bypass Code Execution Vulnerability
CVE Number = CVE-2018-7489 A vulnerability in FasterXML jackson-databind could allow an unauthenticated, remote attacker to bypass security restrictions and execute arbitrary code
Read More
Underbit libmad mad_decoder_run() Function Denial of Service Vulnerability [CVE-2018-7263]
CVE number – CVE-2018-7263 A vulnerability in the mad_decoder_run() function of Underbit libmad could allow an unauthenticated, remote attacker to cause a denial
Read MoreAsus RT-AC88U deleteOfflineClients Memory Corruption Vulnerability [CVE-2017-12754]
CVE Number – CVE-2017-12754 A vulnerability in the httpd daemon in Asuswrt-Merlin firmware used by multiple Asus routers could allow
Read More