2025-01-10 Post a Comment

Ivanti warns of new Connect Secure flaw used in zero-day attacks

By Lawrence Abrams Ivanti is warning that hackers exploited a Connect Secure remote code execution vulnerability tracked as CVE-2025-0282 in zero-day attacks to install malware on appliances. The company says it became aware of the vulnerabilities after the Ivanti Integrity Checker Tool (ICT) detected malicious activity on customers’ appliances. Ivanti launched an investigation and confirmed that threat actors were actively exploiting CVE-2025-0282 as a zero-day. CVE-2025-0282 is a critical (9.0) stack-based buffer […]

alt=1. A man wearing a hoodie is holding a red box, standing against a neutral background.

Cyber security

2024-08-28 Post a Comment

Hackers use PHP exploit to backdoor Windows systems with new malware

By Sergiu Gatlan Unknown attackers have deployed a newly discovered backdoor dubbed Msupedge on a university’s Windows systems in Taiwan, likely by exploiting a recently patched PHP remote code execution vulnerability (CVE-2024-4577). CVE-2024-4577 is a critical PHP-CGI argument injection flaw patched in June that impacts PHP installations running on Windows systems with PHP running in CGI mode. It allows unauthenticated attackers to execute arbitrary code and leads to complete system compromise following successful exploitation. […]

alt=A diagram illustrating the process of hacking DHCP to gain elevated privileges on Windows.

Cyber security

2024-03-26 1 comment

DHCP Hacked To Escalate Privileges In Windows Domains

ByBalaji: Security researchers have uncovered a sophisticated method of exploiting the Dynamic Host Configuration Protocol (DHCP) administrators group to escalate privileges within Windows domains. This technique, dubbed “DHCP Coerce,” leverages legitimate privileges to compromise entire networks potentially. The vulnerability centers around the DHCP (Dynamic Host Configuration Protocol) service, which is essential for network administration. It automates the assignment of IP addresses, simplifying the management of network connections. However, this convenience […]

alt=Fortinet's security platform safeguards business data.

Cyber security

2024-03-13 Post a Comment

Vulnerability in 150K+ Fortinet Devices Let Hackers Execute Arbitary Code Remotely

By Guru Baran A critical security flaw identified as CVE-2024-21762 has been discovered in Fortinet’s FortiOS and FortiProxy secure web gateway systems, potentially impacting around 150,000 devices worldwide. The vulnerability allows for unauthenticated remote code execution (RCE) by sending specially crafted HTTP requests to the affected machines. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that attackers actively exploit the flaw, adding it to its Known Exploited Vulnerabilities […]

Ivanti warns of new Connect Secure flaw used in zero-day attacks

Like this:

Hackers use PHP exploit to backdoor Windows systems with new malware

Like this:

DHCP Hacked To Escalate Privileges In Windows Domains

Like this:

Vulnerability in 150K+ Fortinet Devices Let Hackers Execute Arbitary Code Remotely

Like this:

Ivanti warns of new Connect Secure flaw used in zero-day attacks

Please Share this:

Like this:

Hackers use PHP exploit to backdoor Windows systems with new malware

Please Share this:

Like this:

DHCP Hacked To Escalate Privileges In Windows Domains

Please Share this:

Like this:

Vulnerability in 150K+ Fortinet Devices Let Hackers Execute Arbitary Code Remotely

Please Share this:

Like this: